Home

Description

A reflected cross-site scripting (XSS) vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.

PUBLISHED Reserved 2025-12-08 | Published 2026-01-23 | Updated 2026-01-23 | Assigner mitre

References

www.todesktop.com/changelog

www.todesktop.com/security/advisories/TDSA-2025-003

cve.org (CVE-2025-67231)

nvd.nist.gov (CVE-2025-67231)

Download JSON