CVE-2025-41356General(anonproxyserver / anon_proxy_server)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagconnect.php' endpoint.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • anon_proxy_server

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Products
anon_proxy_server

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-31: 1Technical Details · 2026-03-31: 103-31
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • INCIBE-CERT@incibe_cert
    General

    ⚠️#INCIBEaviso | Cross-Site Scripting (XSS) reflejado en #Anon Proxy Server #CVE CVE-2025-41355, CVE-2025-41356 y CVE-2025-41357 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/cross-site-scripting-xss-reflejado-en-anon-proxy-server #AvisosDeSeguridad #TI #CNA #0day

    Post summary

    The advisory highlights reflected XSS issues (CVE‑2025‑41355, ‑41356, ‑41357) in Anon Proxy Server but does not provide PoC details, exploit code, active exploitation evidence, or remediation guidance.

    02020525
    42.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appanonproxyserveranon_proxy_server0.104--

Explore more