A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://github.com/Secsys-FDU/CVE-2025-51864 |
Configurations
No configuration.
History
22 Jul 2025, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-22 15:15
Updated : 2025-07-22 16:15
NVD link : CVE-2025-51864
Mitre link : CVE-2025-51864
JSON object : View
Products Affected
No product.
CWE
No CWE.