Description
Apache Felix Webconsole是美国阿帕奇（Apache）基金会的一个简单的工具，可以使用 Web 浏览器检查和管理 OSGi 框架实例。 Apache Felix Webconsole 4.x至4.9.8版本和5.x至5.0.8版本存在跨站脚本漏洞，该漏洞源于网页生成期间输入的不正确中和。
Apache Felix Webconsole 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2025-25247/
https://access.redhat.com/security/cve/cve-2025-25247
https://github.com/advisories/GHSA-4c37-7m5h-c8m9
https://lists.apache.org/thread/z47jbf0rbylzd0ktfzdw9c8b5fpyl24m
https://cve.imfht.com/product/Apache%20Felix%20Webconsole
https://nvd.nist.gov/vuln/detail/CVE-2023-38435
https://www.knowsafe.com/ti/info/0/975352
https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHEFELIX-8707741
https://seclists.org/oss-sec/2025/q1/119
https://www.cve.org/CVERecord?id=CVE-2025-25247