Eyodav/CVE-2025-34157

Eyodav/CVE-2025-34157

GitHubGitHub
GitHubgithub.com
Releases0
A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to delete a project created by a low-privileged user. This can lead to takeover of the Coolify instance (cookies, API tokens, WebSocket/terminal actions)
Log in to subscribe
Subscribe above to receive notifications when new versions are released.
VersionDate
Stability
Stability is determined by the version string and my be inaccurate.
PreviousNext