CVE-2025-59302 | Apache CloudStack up to 4.20.1/4.21.x Javascript Engine stack-based overflow

November 27, 2025 Yanac

A vulnerability was found in Apache CloudStack up to 4.20.1/4.21.x. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Javascript Engine. The manipulation results in stack-based buffer overflow.

This vulnerability is identified as CVE-2025-59302. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More