ByteOS Network

NVD Vulnerability Details :

CVE-2025-27155

Received

Source-security-advisories@github.com

Published At-04 Mar, 2025 | 17:15

Updated At-04 Mar, 2025 | 17:15

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator (pineconesim) included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped when restarting pineconesim.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	security-advisories@github.com
CWE-80	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/matrix-org/pinecone/commit/218b2801995b174085cb1c8fafe2d3aa661f85bd	security-advisories@github.com	N/A
https://github.com/matrix-org/pinecone/security/advisories/GHSA-fr62-mg2q-7wqv	security-advisories@github.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History