CVE-2025-52842 - CVE House
Back to Database
Status published Medium CVE-2025-52842

Laundry 2.3.0 - Account Takeover via Reflected XSS

Vulnerability Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-52842

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Laundry
Vulnerable Versions:
2.3.0

Timeline

Official Publish: July 2nd, 2025
Last Modified: July 2nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)