Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-54134

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. This vulnerability exists because the application does not properly handle exceptions which occur as a result of changes to user-modifiable URL parameters. This is fixed in version 11.0.9.

Published

2025-07-21T21:15:26.863

Last Modified

2025-07-30T17:07:18.563

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-20
    CWE-248
    CWE-703
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application psu haxcms-nodejs < 11.0.9 Yes
References