CVE-2025-67842

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets can be served on any other tenant's documentation site.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-829

Affected software

Vendor	Product	Versions
Mintlify	Mintlify Platform	< 2025-11-15

References

https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28Third Party Advisory
https://heartbreak.ingThird Party Advisory
https://kibty.town/blog/mintlify/Exploit, Third Party Advisory
https://news.ycombinator.com/item?id=46317098Issue Tracking
https://www.mintlify.com/blog/working-with-security-researchers-november-2025Vendor Advisory
https://www.mintlify.com/docs/changelogRelease Notes
https://kibty.town/blog/mintlify/Exploit, Third Party Advisory

Timeline

Published: Dec 19, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-678439.8A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attac CVE-2025-678444.3The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the re CVE-2025-678455.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj CVE-2025-678466.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad CVE-2025-678478.8A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is CVE-2025-678488.1A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Inter CVE-2025-678496.1A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows at CVE-2025-67854.7Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN CVE-2025-678506.1A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided data CVE-2025-678517.8A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote atta CVE-2025-678526.1A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-co CVE-2025-678537.5A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerabi