TI-2025-10214 CVE-2025-11147 · GHSA-c3mh-jph2-cvxh
Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Priority LOW 22
Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
5 records
Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
Reflected Cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1.
The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges.
apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port.
apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.