Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-64759

Homarr is an open-source dashboard. Prior to version 1.43.3, stored XSS vulnerability exists, allowing the execution of arbitrary JavaScript in a user's browser, with minimal or no user interaction required, due to the rendering of a malicious uploaded SVG file. This could be abused to add an attacker's account to the "credentials-admin" group, giving them full administrative access, if a user logged in as an administrator was to view the page which renders or redirects to the SVG. This issue has been patched in version 1.43.3.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.8%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2025-64759
  • Homarr » Homarr » Version: 0.0.1
    cpe:2.3:a:homarr:homarr:0.0.1
  • Homarr » Homarr » Version: 1.0.0
    cpe:2.3:a:homarr:homarr:1.0.0
  • Homarr » Homarr » Version: 1.0.1
    cpe:2.3:a:homarr:homarr:1.0.1
  • Homarr » Homarr » Version: 1.1.0
    cpe:2.3:a:homarr:homarr:1.1.0
  • Homarr » Homarr » Version: 1.10.0
    cpe:2.3:a:homarr:homarr:1.10.0
  • Homarr » Homarr » Version: 1.11.0
    cpe:2.3:a:homarr:homarr:1.11.0
  • Homarr » Homarr » Version: 1.12.0
    cpe:2.3:a:homarr:homarr:1.12.0
  • Homarr » Homarr » Version: 1.13.0
    cpe:2.3:a:homarr:homarr:1.13.0
  • Homarr » Homarr » Version: 1.13.1
    cpe:2.3:a:homarr:homarr:1.13.1
  • Homarr » Homarr » Version: 1.14.0
    cpe:2.3:a:homarr:homarr:1.14.0
  • Homarr » Homarr » Version: 1.15.0
    cpe:2.3:a:homarr:homarr:1.15.0
  • Homarr » Homarr » Version: 1.16.0
    cpe:2.3:a:homarr:homarr:1.16.0
  • Homarr » Homarr » Version: 1.17.0
    cpe:2.3:a:homarr:homarr:1.17.0
  • Homarr » Homarr » Version: 1.18.0
    cpe:2.3:a:homarr:homarr:1.18.0
  • Homarr » Homarr » Version: 1.18.1
    cpe:2.3:a:homarr:homarr:1.18.1
  • Homarr » Homarr » Version: 1.19.0
    cpe:2.3:a:homarr:homarr:1.19.0
  • Homarr » Homarr » Version: 1.19.1
    cpe:2.3:a:homarr:homarr:1.19.1
  • Homarr » Homarr » Version: 1.2.0
    cpe:2.3:a:homarr:homarr:1.2.0
  • Homarr » Homarr » Version: 1.20.0
    cpe:2.3:a:homarr:homarr:1.20.0
  • Homarr » Homarr » Version: 1.21.0
    cpe:2.3:a:homarr:homarr:1.21.0
  • Homarr » Homarr » Version: 1.22.0
    cpe:2.3:a:homarr:homarr:1.22.0
  • Homarr » Homarr » Version: 1.23.0
    cpe:2.3:a:homarr:homarr:1.23.0
  • Homarr » Homarr » Version: 1.24.0
    cpe:2.3:a:homarr:homarr:1.24.0
  • Homarr » Homarr » Version: 1.25.0
    cpe:2.3:a:homarr:homarr:1.25.0
  • Homarr » Homarr » Version: 1.26.0
    cpe:2.3:a:homarr:homarr:1.26.0
  • Homarr » Homarr » Version: 1.27.0
    cpe:2.3:a:homarr:homarr:1.27.0
  • Homarr » Homarr » Version: 1.28.0
    cpe:2.3:a:homarr:homarr:1.28.0
  • Homarr » Homarr » Version: 1.29.0
    cpe:2.3:a:homarr:homarr:1.29.0
  • Homarr » Homarr » Version: 1.29.1
    cpe:2.3:a:homarr:homarr:1.29.1
  • Homarr » Homarr » Version: 1.3.0
    cpe:2.3:a:homarr:homarr:1.3.0
  • Homarr » Homarr » Version: 1.3.1
    cpe:2.3:a:homarr:homarr:1.3.1
  • Homarr » Homarr » Version: 1.30.0
    cpe:2.3:a:homarr:homarr:1.30.0
  • Homarr » Homarr » Version: 1.30.1
    cpe:2.3:a:homarr:homarr:1.30.1
  • Homarr » Homarr » Version: 1.31.0
    cpe:2.3:a:homarr:homarr:1.31.0
  • Homarr » Homarr » Version: 1.32.0
    cpe:2.3:a:homarr:homarr:1.32.0
  • Homarr » Homarr » Version: 1.33.0
    cpe:2.3:a:homarr:homarr:1.33.0
  • Homarr » Homarr » Version: 1.34.0
    cpe:2.3:a:homarr:homarr:1.34.0
  • Homarr » Homarr » Version: 1.35.0
    cpe:2.3:a:homarr:homarr:1.35.0
  • Homarr » Homarr » Version: 1.35.1
    cpe:2.3:a:homarr:homarr:1.35.1
  • Homarr » Homarr » Version: 1.36.0
    cpe:2.3:a:homarr:homarr:1.36.0
  • Homarr » Homarr » Version: 1.36.1
    cpe:2.3:a:homarr:homarr:1.36.1
  • Homarr » Homarr » Version: 1.37.0
    cpe:2.3:a:homarr:homarr:1.37.0
  • Homarr » Homarr » Version: 1.38.0
    cpe:2.3:a:homarr:homarr:1.38.0
  • Homarr » Homarr » Version: 1.39.0
    cpe:2.3:a:homarr:homarr:1.39.0
  • Homarr » Homarr » Version: 1.4.0
    cpe:2.3:a:homarr:homarr:1.4.0
  • Homarr » Homarr » Version: 1.40.0
    cpe:2.3:a:homarr:homarr:1.40.0
  • Homarr » Homarr » Version: 1.41.0
    cpe:2.3:a:homarr:homarr:1.41.0
  • Homarr » Homarr » Version: 1.42.0
    cpe:2.3:a:homarr:homarr:1.42.0
  • Homarr » Homarr » Version: 1.42.1
    cpe:2.3:a:homarr:homarr:1.42.1
  • Homarr » Homarr » Version: 1.43.0
    cpe:2.3:a:homarr:homarr:1.43.0
  • Homarr » Homarr » Version: 1.43.1
    cpe:2.3:a:homarr:homarr:1.43.1
  • Homarr » Homarr » Version: 1.43.2
    cpe:2.3:a:homarr:homarr:1.43.2
  • Homarr » Homarr » Version: 1.5.0
    cpe:2.3:a:homarr:homarr:1.5.0
  • Homarr » Homarr » Version: 1.6.0
    cpe:2.3:a:homarr:homarr:1.6.0
  • Homarr » Homarr » Version: 1.7.0
    cpe:2.3:a:homarr:homarr:1.7.0
  • Homarr » Homarr » Version: 1.8.0
    cpe:2.3:a:homarr:homarr:1.8.0
  • Homarr » Homarr » Version: 1.9.0
    cpe:2.3:a:homarr:homarr:1.9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved