Medium
Security advisory
A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of the patch is 0df8a5e8722188744973168648e4c74c69ce67fd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249420.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-25097
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:13 UTC · Revision 1
Source evidence
A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of the patch is 0df8a5e8722188744973168648e4c74c69ce67fd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249420.
osv:CVE-2018-25097
Complete source record
{
"id": "5d4ec75055c1425bced27c73c17ae4fe065b4f7c44b39c7fea9910b6d25ffeb1",
"url": "https://osv.dev/vulnerability/CVE-2018-25097",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-25097",
"summary": "A vulnerability, which was classified as problematic, was found in Acumos Design Studio up to 2.0.7. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The name of the patch is 0df8a5e8722188744973168648e4c74c69ce67fd. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-249420.",
"evidence": "osv:CVE-2018-25097",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-25097",
"aliases": [
"CVE-2018-25097"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/acumos/design-studio",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "613b224f0fa6eeb47a69897fadb75655e15fa947"
},
{
"fixed": "0df8a5e8722188744973168648e4c74c69ce67fd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:acumos:design_studio:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.0.8"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "0df8a5e8722188744973168648e4c74c69ce67fd"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "613b224f0fa6eeb47a69897fadb75655e15fa947"
}
],
"source": "REFERENCES_TAG",
"original_tag": "2.0.8"
}
]
}
}
],
"versions": [
"1.40.2",
"0.0.31",
"0.0.29"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-25097.json",
"vanir_signatures": [
{
"id": "CVE-2018-25097-37b68327",
"digest": {
"length": 937,
"function_hash": "105024058093844651907823343305318220301"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/ArtfactDetailsController.java",
"function": "fetchJsonTOSCA"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-68de23c2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"113645984023277874122254864279695899810",
"316238837421169336157455237970590490941",
"170819091101600339199093165079510804425",
"212070714874105539969428416895612041101",
"190670652774707536015743824992047247877",
"12210398990974040460446484393214088218",
"107740023390613310658813217224292930034",
"165886538656248391257835800258243780368",
"165272081242141001856089547623936044005",
"178832002305837144003836161968643579818",
"86727581217184411438438213494909396002",
"91882562680408247242597760987337259255"
]
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/ArtfactDetailsController.java"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-6b483e9c",
"digest": {
"length": 848,
"function_hash": "17922304626923661295334352339296876205"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "modifyLink"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-6b7fbac5",
"digest": {
"length": 964,
"function_hash": "251096607023395650802731915350857275423"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "deleteCompositeSolution"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-72afa825",
"digest": {
"length": 1912,
"function_hash": "145823337962805772319061507040485037508"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "addLink"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-757906e7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"83239913781376577806394596312387716294",
"179461433722511213891951571779378715664",
"293800877231065797227782573378464043710",
"5152451688114631182867383445429764019",
"143333140356147977408294746894529584383",
"148336814910727257358268417957176239353",
"11883405404130728948646270082658930988",
"315027267766839897838264164937338492170",
"201984412353296968028720103734798838005",
"82431754528584255932691278839278327028",
"196784434787579496797530480105502922303",
"54268908724352758032711217191881247740",
"236265066593091078356086677348261826959",
"220858993542240406545827814095626010513",
"153405321659304751780667391425380587134",
"317059401328896987491039916209401048435",
"334346146297072724395349764775367760638",
"5671111310825851467294472982046511812",
"54766008886407948261431244207096482714",
"60185937130775226765152350134139009635",
"228938915396016565287189485874578390950",
"77008172754667438075155601675900914034",
"31658139571411004896852290208134079237",
"144880477437831998974265267167278140951",
"5766748875039838934483489841561430665",
"143598734380602966132708388626729357966",
"183465182480378829881772548035568588660",
"255550050580303756546791082598901327462",
"64825143786743799150219164262715305505",
"6394421841007827977311611240845663320",
"290289576139557406583075077407289970609",
"256673256850497771089914328614114209733",
"247853016185513443827264831759797595268",
"37847468887830376027021418195662026133",
"233869104704484082632873996845166696898",
"332899651117731150550592694048847375522",
"167204215417998090111709758298925328299",
"15322004286043571631569438296408752457",
"43647773445241928007991622778755853381",
"212148883601840517946426855861122888843",
"135713059071508619847669979763261479149",
"22889242704376823299696579783477993351",
"209372263775163930100887898242189145668",
"37739296038326787547008598865530373178",
"278605115545426942312979982422264986072",
"19238336461782706943756044110888089847",
"289325869344174933252811020333962454678",
"224942355194496928192352427642552492978",
"53392316477705520622153934819553099460",
"120691166880500513811157507647097173815",
"12971268782730088927948437467753385648",
"284811198318948301295934517594097608685",
"159516355948577496109197974121280146656",
"313166497090079467204058765998222933264",
"297517329494718261292524585046929524320",
"13556346557732779593632251213835400891"
]
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-7ce64fd7",
"digest": {
"length": 933,
"function_hash": "14939615453622338352221894776978948026"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "validateCompositeSolution"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-831eae06",
"digest": {
"length": 896,
"function_hash": "298861183933991670154409557458275425816"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "setProbeIndicator"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-8581b6d3",
"digest": {
"length": 739,
"function_hash": "291067216048774192689980927629829502170"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "closeCompositeSolution"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-a7b41f19",
"digest": {
"length": 2197,
"function_hash": "190796728966535549201534109017785976823"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "saveCompositeSolution"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-b49929c9",
"digest": {
"length": 1164,
"function_hash": "238562282518729171393793706937517394281"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "deleteNode"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-b6264155",
"digest": {
"length": 1166,
"function_hash": "205687565133037433029437858585079871922"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "deleteLink"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-ca1e8785",
"digest": {
"length": 1015,
"function_hash": "80025896930333715110074561334246077681"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "addNode"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-ee5d2eec",
"digest": {
"length": 739,
"function_hash": "46169237412282626299046417512208187591"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "clearCompositeSolution"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-f66d0336",
"digest": {
"length": 639,
"function_hash": "215611351738188787087355981640127210409"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "readCompositeSolutionGraph"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-f8184e7d",
"digest": {
"length": 1017,
"function_hash": "266491471348810435470230501089771270129"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/ArtfactDetailsController.java",
"function": "fetchProtoBufJSON"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-25097-f820ed36",
"digest": {
"length": 1417,
"function_hash": "292823394516144764535144537409149529490"
},
"source": "https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd",
"target": {
"file": "ds-compositionengine/src/main/java/org/acumos/designstudio/ce/controller/SolutionController.java",
"function": "modifyNode"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:21:54Z"
}
}
],
"modified": "2026-10-20T13:21:54.971323874Z",
"provider": "osv",
"references": [
"https://github.com/acumos/design-studio/releases/tag/2.0.8",
"https://vuldb.com/?id.249420",
"https://vuldb.com/?ctiid.249420",
"https://github.com/acumos/design-studio/commit/0df8a5e8722188744973168648e4c74c69ce67fd"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-25097",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387570,
"published_at": "2024-01-02T16:15:11.1+00:00"
}