Log in Start free

Vulnerability · Published Mar 26, 2025 · Assigned by GitHub_M

CVE-2025-27406Icinga Reporting Stored XSS leads to SSRF

High 7.7

In plain English

A high-severity cross-site scripting in icingaweb2-module-reporting from Icinga. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.7High
Exploit odds (30 days)0.3%top 73.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act on behalf of the user, if the template is being previewed; and act on behalf of the headless browser, if a report using the template is printed to PDF. This issue has been resolved in version 1.0.3 of Icinga Reporting. As a workaround, review all templates and remove suspicious settings.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12icingaweb2-module-reportingno fix listedDEBIAN-CVE-2025-27406
Debian:13icingaweb2-module-reporting1.0.4-1DEBIAN-CVE-2025-27406
Debian:14icingaweb2-module-reporting1.0.4-1DEBIAN-CVE-2025-27406
Ubuntu:22.04:LTSicingaweb2-module-reportingno fix listedUBUNTU-CVE-2025-27406
Ubuntu:24.04:LTSicingaweb2-module-reportingno fix listedUBUNTU-CVE-2025-27406
Ubuntu:25.10icingaweb2-module-reportingno fix listedUBUNTU-CVE-2025-27406
Ubuntu:26.04:LTSicingaweb2-module-reportingno fix listedUBUNTU-CVE-2025-27406
Ubuntu:26.10icingaweb2-module-reportingno fix listedUBUNTU-CVE-2025-27406

Affected products (as reported)

VendorProductVersions
Icinga icingaweb2-module-reporting >= 0.10.0, < 1.0.3

Weakness: CWE-79, CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

References