CVE-2025-62523 | THM-Health PILOS up to 4.7.x cross-domain policy (GHSA-pgfw-f4mp-5445)

October 28, 2025 Yanac

A vulnerability has been found in THM-Health PILOS up to 4.7.x and classified as critical. Affected by this vulnerability is an unknown functionality. Performing manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is known as CVE-2025-62523. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More