Reflected Cross-Site Scripting in Apt-Cacher-NG by Aptitude

CVE-2025-11147

What is CVE-2025-11147?

A reflected cross-site scripting vulnerability has been identified in Apt-Cacher-NG version 3.2.1. This flaw allows attackers to inject and execute malicious scripts within the application through specially crafted requests to the '/html/.html' endpoint. Such exploitation can compromise user interactions, leading to unauthorized actions or data manipulation. It is crucial for users of Apt-Cacher-NG to apply security best practices and keep their systems updated to mitigate potential attacks stemming from this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References