Apidog Web Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:apidog:apidog_web_platform:2.7.15:*:*:*:*:*:*:*
part: a version: 2.7.15 update: *
| Vendor | Apidog (30e0bcf3-0043-5a09-97bd-5d261ae6ec41) |
|---|---|
| Product | Apidog Web Platform (d967c572-da53-58c6-9249-e018363022ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41085 |
vulnerable | 2026-06-08 07:25:06.606739 |
Stored Cross-Site Scripting (XSS) in Apidog web platform
Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG image uploads are not properly sanitized. This allows attackers to embed malicious scripts in SVG files by sending a POST request to '/api/v1/user-avatar', which are then stored on the server and executed in the context of any user accessing the compromised resource.
Published: 2026-02-04T09:56:45.513Z
Updated: 2026-02-04T15:11:26.369Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.