CVE-2019-25367 | ArangoDB Community Edition 3.4.2-1 Aardvark Web Admin Interface index.html cross site scripting (Exploit 46407 / EDB-46407)

February 15, 2026 Yanac

A vulnerability classified as problematic was found in ArangoDB Community Edition 3.4.2-1. This affects an unknown part of the file /_db/_system/_admin/aardvark/index.html of the component Aardvark Web Admin Interface. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2019-25367. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More