CVE-2025-11031: datatables before 1.10.15 (exclusive); +1 more affected products

Affected technology

datatables · before 1.10.15 (exclusive)
sprymedia

DataTables · 1.10.0, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.10.8, 1.10.9, 1.10.10, 1.10.11, 1.10.12, 1.10.13
Vendor not specified by the source

Description’s affected range: up to 1.10.13

Component: Not specified by the source
Function: of
File: /examples/resources/examples.php

Attack conditions (VulDB, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

VulDB’s CVSS 4.0 assessment (base score 5.5/10) rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Patch identifier: 3b24f99ac4ddb7f9072076b0d07f0b1a408f177a