CVE-2019-25367 - ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

CVE ID : CVE-2019-25367 Published : Feb. 15, 2026, 1:58 p.m. | 26 minutes ago Description : ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...