CVE-2025-541347.1HighCWE-248

CVE-2025-54134: HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service

haxtheweb · issues

Affected: haxtheweb issues · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days

41st percentile

050100

Higher than 41% of scored CVEs

7.1HighCVSS 4.0

LowMediumHighCrit.

DescriptionCVE.org

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. This vulnerability exists because the application does not properly handle exceptions which occur as a result of changes to user-modifiable URL parameters. This is fixed in version 11.0.9.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

haxtheweb · issues< 11.0.9

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Uncaught Exception · Input Validation and Logic
Vendor: haxtheweb
Published: July 2025
Band: Unlikely (under 1%), July 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-54134 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.