{"id":49201,"date":"2025-06-06T04:33:39","date_gmt":"2025-06-06T04:33:39","guid":{"rendered":""},"modified":"2025-09-29T02:50:34","modified_gmt":"2025-09-29T08:50:34","slug":"cve-2025-4991-stored-xss-vulnerability-in-3d-markup-collaborative-industry-innovator","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4991-stored-xss-vulnerability-in-3d-markup-collaborative-industry-innovator\/","title":{"rendered":"CVE-2025-4991: Stored XSS Vulnerability in 3D Markup Collaborative Industry Innovator<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-4991 is a stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in the Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x. XSS vulnerabilities are a class of security flaws that can allow an attacker to inject malicious scripts into webpages viewed by other users, potentially leading to significant data breaches or system compromises.
\nThis particular vulnerability matters because it can allow<\/a> an attacker to execute arbitrary script code in a user’s browser session. The Collaborative Industry Innovator is widely used in the manufacturing and design industries, meaning that businesses in these sectors could be at risk of data leakage<\/a> or system compromise if they are running affected versions of the software.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4991
\nSeverity: High (8.7 CVSS)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: System compromise or data leakage<\/a><\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Collaborative Industry<\/a> Innovator | 3DEXPERIENCE R2022x – R2025x<\/p>\n

How the Exploit Works<\/strong><\/p>\n

A stored XSS vulnerability like CVE-2025-4991 allows an attacker to inject<\/a> malicious script into a webpage that then gets stored on the server. Whenever another user visits that webpage, the script is served up along with the rest of the webpage content and is executed in the user’s<\/a> browser session. This can allow the attacker to steal sensitive information<\/a>, impersonate the user, or perform actions on the user’s behalf.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Here’s a conceptual example of how the vulnerability may be exploited<\/a>. This is a sample HTTP POST request that injects a malicious script into a vulnerable<\/a> endpoint.<\/p>\n

POST \/vulnerable\/endpoint HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{\n\"markup_data\": \"<script>malicious_code_here<\/script>\"\n}<\/code><\/pre>\n
In this example, the `markup_data` field, which is meant to contain benign markup data, is instead used to inject a malicious<\/a> script. When this data is later served up to another user, the script will be executed<\/a> in their browser.<\/p>\n
Mitigation<\/strong><\/p>\n
The primary mitigation for this vulnerability is to apply the vendor’s patch<\/a>. If this is not immediately feasible, using a Web Application Firewall (WAF) or an Intrusion Detection System (IDS) can offer temporary mitigation by blocking or alerting on attempts to exploit the vulnerability<\/a>.
\nHowever, these are only temporary solutions and do not address the underlying issue. It is strongly recommended to apply the vendor’s patch as soon as possible to fully mitigate this vulnerability<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview CVE-2025-4991 is a stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in the Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x. XSS vulnerabilities are a class of security flaws that can allow an attacker to inject malicious scripts into webpages viewed by other users, potentially leading to significant data breaches or […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[81],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-49201","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-xss"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t