HanTul/Kotaemon-CVE-2025-56526-56527-disclosure

HanTul/Kotaemon-CVE-2025-56526-56527-disclosure

Releases0
Stars1
Public disclosure for CVE-2025-56526 and CVE-2025-56527 — Stored XSS via unsanitized PDF content rendering and plaintext credential exposure in Kotaemon 0.11.0. Includes full technical analysis, PoC, impact assessment, and responsible disclosure timeline.

Collections containing this project

Showing collections based on your access.

This project is not in any collections you can view.