CVE-2025-61583: joni1802 ts3 manager

csirt@kutim:~/threat-intel/cve/CVE-2025-61583

CVSS 6.1 · Medium EPSS 0,25%

Kerentanan Improper Input Validation pada joni1802 ts3 manager. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostnames are executed in the victim's browser context without proper sanitization. This issue is fixed in version 2.2.2.

Rincian

Terbit di NVD: 1 Oktober 2025
Terakhir diubah: 12 Oktober 2026
Status NVD: Analyzed
CVSS 3.1: 6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-20: Improper Input Validation
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
EPSS (30 hari): 0,25% peluang dieksploitasi; lebih tinggi dari 15,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
joni1802	ts3 manager	Semua versi sebelum 2.2.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/joni1802/ts3-manager/commit/3a069915f97a6f5dae1fe0b2e32aa11a69d83b5e patch
https://github.com/joni1802/ts3-manager/security/advisories/GHSA-qw6j-37r6-m93g exploit · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 13 Okt 2026, 06:25 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.