Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Rodrigue | EXIF Viewer Classic | affected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-3157 | The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF meta data. When an image is rendered and crafted EXIF meta data is processed, an arbitrary script may be executed on the web browser. Versions 2.3.2 and 2.4.0 were reported as vulnerable. According to the vendor, the product has been refactored after those old versions and the version 3.0.1 is not vulnerable. |
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 29 Jan 2025 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF meta data. When an image is rendered and crafted EXIF meta data is processed, an arbitrary script may be executed on the web browser. Versions 2.3.2 and 2.4.0 were reported as vulnerable. According to the vendor, the product has been refactored after those old versions and the version 3.0.1 is not vulnerable. | |
| Weaknesses | CWE-79 | |
| References |
| |
| Metrics |
cvssV3_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published:
Updated: 2025-02-12T19:51:15.739Z
Reserved: 2025-01-14T08:31:38.228Z
Link: CVE-2025-23362
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2025-01-29T02:15:27.910
Modified: 2026-04-15T00:35:42.020
Link: CVE-2025-23362
Redhat
No data.
OpenCVE Enrichment
No data.