CVE-2025-40641
BaseFortify
Publication date: 2025-09-08
Last updated on: 2025-09-08
Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| multi-purpose_inventory_management_system | multi-purpose_inventory_management_system | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can impact you by allowing a remote attacker to execute malicious scripts in the context of an authenticated user's session. This can lead to theft of session cookies, which may enable the attacker to hijack user sessions and gain unauthorized access to the system or sensitive information. [1]
Can you explain this vulnerability to me?
CVE-2025-40641 is a stored Cross-Site Scripting (XSS) vulnerability in the Multi-Purpose Inventory Management System. It occurs because the system does not properly validate user input sent via the product_name parameter in a POST request to the /Controller_Products/update endpoint. This allows an attacker to inject malicious scripts that get stored and later executed in the browser of an authenticated user, potentially stealing their session cookies. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending a crafted POST request to the /Controller_Products/update endpoint with a malicious script in the product_name parameter and observing if the script is stored and executed in the context of an authenticated user. For example, using curl to test: curl -X POST -d "product_name=<script>alert('XSS')</script>" https://your-target-domain/Controller_Products/update -b cookies.txt -c cookies.txt. Monitoring web application logs for suspicious POST requests to this endpoint with script tags in product_name can also help detect exploitation attempts. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the /Controller_Products/update endpoint to trusted users only, implementing input validation and sanitization on the product_name parameter to prevent script injection, and educating users to avoid clicking on suspicious links. Since no patch or solution is reported yet, applying web application firewall (WAF) rules to block malicious payloads targeting this endpoint can help reduce risk. [1]