CVE-2025-27155

MEDIUM

Pinecone < 218b2801995b174085cb1c8fafe2d3aa661f85bd - Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator (pineconesim) included in Pinecone up to commit ea4c337 is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped when restarting pineconesim.

References (2)

Core 2

Scores

CVSS v3 6.1
EPSS 0.0022
EPSS Percentile 12.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-80
Status published
Products (2)
matrix-org/pinecone 0Go
matrix-org/pinecone < 218b2801995b174085cb1c8fafe2d3aa661f85bd
Published Mar 04, 2025
Tracked Since Feb 18, 2026