{"id":49156,"date":"2025-06-05T22:31:08","date_gmt":"2025-06-05T22:31:08","guid":{"rendered":""},"modified":"2025-09-14T19:05:41","modified_gmt":"2025-09-15T01:05:41","slug":"cve-2025-4984-stored-cross-site-scripting-vulnerability-in-city-discover-referential-manager","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4984-stored-cross-site-scripting-vulnerability-in-city-discover-referential-manager\/","title":{"rendered":"CVE-2025-4984: Stored Cross-Site Scripting Vulnerability in City Discover Referential Manager<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

We are addressing a serious security vulnerability, classified as CVE-2025-4984, that affects the City Discover in City Referential Manager on 3DEXPERIENCE R2025x. This vulnerability, a type of stored Cross-Site Scripting (XSS), could potentially allow an attacker to execute arbitrary script code within a user’s browser session. As cybersecurity professionals, it’s crucial for us to understand the severity of this situation due to the high potential for system compromise<\/a> or data leakage. The risk is especially pertinent for those organizations utilizing the affected software in managing and referencing city data<\/a>.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4984
\nSeverity: High (8.7 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Potential system compromise or data leakage<\/a><\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

City Discover in City Referential<\/a> Manager | 3DEXPERIENCE R2025x<\/p>\n

How the Exploit Works<\/strong><\/p>\n

This Stored Cross-Site Scripting (XSS) vulnerability works when an attacker manages to inject<\/a> malicious script into a webpage viewed by other users. The script is ‘stored’ on the target server, hence the term ‘stored XSS<\/a>. When the victim navigates to the affected webpage, the malicious script is executed<\/a>. In the case of CVE-2025-4984, the attacker would specifically target the City Discover in City Referential Manager software. Upon successful execution, the script runs within the user’s browser session, potentially leading to system<\/a> compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Consider the following conceptual example illustrating how the vulnerability might be exploited<\/a>:<\/p>\n

POST \/city-discover\/referential-manager HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{ \"city_data\": \"<script> malicious_payload <\/script>\" }<\/code><\/pre>\n
In this example, the attacker sends a POST request<\/a> to the City Discover Referential Manager endpoint with JavaScript embedded within the ‘city_data’ payload. When a user subsequently accesses data from this endpoint, the malicious script is executed in the user’s<\/a> browser session.
\nMitigating this vulnerability should be a priority for any organization<\/a> using the affected software. Applying the vendor’s patch is the recommended solution, but in the interim, a web application firewall (WAF) or intrusion detection system (IDS) can be used for temporary mitigation.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview We are addressing a serious security vulnerability, classified as CVE-2025-4984, that affects the City Discover in City Referential Manager on 3DEXPERIENCE R2025x. This vulnerability, a type of stored Cross-Site Scripting (XSS), could potentially allow an attacker to execute arbitrary script code within a user’s browser session. As cybersecurity professionals, it’s crucial for us to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[81],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-49156","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-xss"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t