CVE-2025-66036Disclosure

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Retro is an online platform providing items of vintage collections. Prior to version 2.4.7, Retro is vulnerable to a cross-site scripting (XSS) in the input handling component. This issue has been patched in version 2.4.7.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/Anjaliavv51/Retro/security/advisories/GHSA-gvv6-p6h6-2vj2

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://undercodetesting.com/the-git-folder-exposed-how-a-single-misconfiguration-can-hand-hackers-your-entire-source-code-cve-2025-66036-deep-dive-video/

Full discourse1 post

UNDERCODE TESTING@UndercodeUpdate253d
Disclosure
🚨 The git Folder Exposed: How a Single Misconfiguration Can Hand Hackers Your Entire Source Code (#CVE-2025-66036 Deep Dive) + Video https://undercodetesting.com/the-git-folder-exposed-how-a-single-misconfiguration-can-hand-hackers-your-entire-source-code-cve-2025-66036-deep-dive-video/ Educational Purposes!
Post summary
A blog post/video is announced that discusses CVE‑2025‑66036, but no additional details such as PoC, exploit code, patch, or active exploitation are provided.
0000042
396 followersView on X

Explore more

Back to dashboard