CVE-2025-65095
CVE-2025-65095
9.4
CriticalPublished:
Last updated:
Source:security-advisories@github.com
Deferred
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- None
- User Interaction
- Active
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- High
- Integrity (Subsequent)
- High
- Availability (Subsequent)
- High
Description
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1.
References
security-advisories@github.com
https://github.com/Lookyloo/lookyloo/blob/main/website/web/default_csp.pysecurity-advisories@github.com
https://github.com/Lookyloo/lookyloo/commit/ac2f73dbfcad88b815b18c42cca77a1c645f1726security-advisories@github.com
https://github.com/Lookyloo/lookyloo/security/advisories/GHSA-m9g6-23c8-vrxfsecurity-advisories@github.com
https://vulnerability.circl.lu/vuln/gcve-1-2025-0018