Is CVE-2025-12799 being exploited?

No public exploit is currently tracked.

How severe is CVE-2025-12799?

CVE-2025-12799 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2025-12799

Description

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.