CVE-2025-24025
Coolify Vulnerable to Reflected XSS on Tag Search
MEDIUM
6.1
CVSS Score
Published: January 24, 2025 at 04:46 PM UTC
Updated: June 17, 2026 at 08:57 AM UTC
2 products affected across 2 vendorsCoolifyCoolify
Using coolify by coollabsio?
Get instant alerts when new vulnerabilities affect coolify - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.1
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site scripting. Version 4.0.0-beta.380 fixes the issue.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 4.0.04.0.0 beta1004.0.0 beta1014.0.0 beta1024.0.0 beta1034.0.0 beta1044.0.0 beta1054.0.0 beta1064.0.0 beta1074.0.0 beta1084.0.0 beta1094.0.0 beta1104.0.0 beta1114.0.0 beta1124.0.0 beta1134.0.0 beta1144.0.0 beta1154.0.0 beta1164.0.0 beta1174.0.0 beta1184.0.0 beta1194.0.0 beta1204.0.0 beta1214.0.0 beta1224.0.0 beta1234.0.0 beta1244.0.0 beta1254.0.0 beta1264.0.0 beta1274.0.0 beta1284.0.0 beta1294.0.0 beta1304.0.0 beta1314.0.0 beta1324.0.0 beta1334.0.0 beta1344.0.0 beta1354.0.0 beta1364.0.0 beta1374.0.0 beta1384.0.0 beta1394.0.0 beta1404.0.0 beta1414.0.0 beta1424.0.0 beta1434.0.0 beta1444.0.0 beta1454.0.0 beta1464.0.0 beta1474.0.0 beta1484.0.0 beta1494.0.0 beta1504.0.0 beta1514.0.0 beta1524.0.0 beta1534.0.0 beta1544.0.0 beta1554.0.0 beta1564.0.0 beta1574.0.0 beta1584.0.0 beta1594.0.0 beta1604.0.0 beta1614.0.0 beta1624.0.0 beta1634.0.0 beta1644.0.0 beta1654.0.0 beta1664.0.0 beta1674.0.0 beta1684.0.0 beta1694.0.0 beta1704.0.0 beta1714.0.0 beta1724.0.0 beta1734.0.0 beta1744.0.0 beta1754.0.0 beta1764.0.0 beta1774.0.0 beta1784.0.0 beta1794.0.0 beta184.0.0 beta1804.0.0 beta1814.0.0 beta1824.0.0 beta1834.0.0 beta1844.0.0 beta1854.0.0 beta1864.0.0 beta1874.0.0 beta1884.0.0 beta1894.0.0 beta194.0.0 beta1904.0.0 beta1914.0.0 beta1924.0.0 beta1934.0.0 beta1944.0.0 beta1954.0.0 beta1964.0.0 beta1974.0.0 beta1984.0.0 beta1994.0.0 beta204.0.0 beta2004.0.0 beta2014.0.0 beta2024.0.0 beta2034.0.0 beta2044.0.0 beta2054.0.0 beta2064.0.0 beta2074.0.0 beta2084.0.0 beta2094.0.0 beta214.0.0 beta2114.0.0 beta2124.0.0 beta2134.0.0 beta2144.0.0 beta2154.0.0 beta2164.0.0 beta2174.0.0 beta2184.0.0 beta2194.0.0 beta224.0.0 beta2204.0.0 beta2214.0.0 beta2224.0.0 beta2234.0.0 beta2244.0.0 beta2254.0.0 beta2264.0.0 beta2274.0.0 beta2284.0.0 beta2294.0.0 beta234.0.0 beta2304.0.0 beta2314.0.0 beta2324.0.0 beta2334.0.0 beta2344.0.0 beta2354.0.0 beta2364.0.0 beta2374.0.0 beta2384.0.0 beta2394.0.0 beta244.0.0 beta2404.0.0 beta2414.0.0 beta2424.0.0 beta2434.0.0 beta2444.0.0 beta2454.0.0 beta2464.0.0 beta2474.0.0 beta2484.0.0 beta2494.0.0 beta254.0.0 beta2504.0.0 beta2514.0.0 beta2524.0.0 beta2534.0.0 beta2544.0.0 beta2554.0.0 beta2564.0.0 beta2574.0.0 beta2584.0.0 beta2594.0.0 beta264.0.0 beta2604.0.0 beta2614.0.0 beta2624.0.0 beta2634.0.0 beta2644.0.0 beta2654.0.0 beta2664.0.0 beta2674.0.0 beta2684.0.0 beta2694.0.0 beta274.0.0 beta2704.0.0 beta2714.0.0 beta2724.0.0 beta2734.0.0 beta2744.0.0 beta2754.0.0 beta2764.0.0 beta2774.0.0 beta2784.0.0 beta2794.0.0 beta284.0.0 beta2804.0.0 beta2814.0.0 beta2824.0.0 beta2834.0.0 beta2844.0.0 beta2854.0.0 beta2864.0.0 beta2874.0.0 beta2884.0.0 beta2894.0.0 beta294.0.0 beta2904.0.0 beta2914.0.0 beta2924.0.0 beta2934.0.0 beta2944.0.0 beta2954.0.0 beta2964.0.0 beta2974.0.0 beta2984.0.0 beta2994.0.0 beta304.0.0 beta3004.0.0 beta3014.0.0 beta3024.0.0 beta3034.0.0 beta3044.0.0 beta3054.0.0 beta3064.0.0 beta3074.0.0 beta3084.0.0 beta3094.0.0 beta314.0.0 beta3104.0.0 beta3114.0.0 beta3124.0.0 beta3134.0.0 beta3144.0.0 beta3154.0.0 beta3164.0.0 beta3174.0.0 beta3184.0.0 beta3194.0.0 beta324.0.0 beta3204.0.0 beta3214.0.0 beta3224.0.0 beta3234.0.0 beta3244.0.0 beta3254.0.0 beta3264.0.0 beta3274.0.0 beta3284.0.0 beta3294.0.0 beta334.0.0 beta3304.0.0 beta3314.0.0 beta3324.0.0 beta3334.0.0 beta3344.0.0 beta3354.0.0 beta3364.0.0 beta3374.0.0 beta3384.0.0 beta3394.0.0 beta344.0.0 beta3404.0.0 beta3414.0.0 beta3424.0.0 beta3434.0.0 beta3444.0.0 beta3454.0.0 beta3464.0.0 beta3474.0.0 beta3484.0.0 beta3494.0.0 beta354.0.0 beta3504.0.0 beta3514.0.0 beta3524.0.0 beta3534.0.0 beta3544.0.0 beta3554.0.0 beta3564.0.0 beta3574.0.0 beta3584.0.0 beta3594.0.0 beta364.0.0 beta3604.0.0 beta374.0.0 beta384.0.0 beta394.0.0 beta404.0.0 beta414.0.0 beta424.0.0 beta434.0.0 beta444.0.0 beta454.0.0 beta464.0.0 beta474.0.0 beta484.0.0 beta494.0.0 beta504.0.0 beta514.0.0 beta524.0.0 beta534.0.0 beta544.0.0 beta554.0.0 beta564.0.0 beta574.0.0 beta584.0.0 beta594.0.0 beta604.0.0 beta614.0.0 beta624.0.0 beta634.0.0 beta644.0.0 beta654.0.0 beta664.0.0 beta674.0.0 beta684.0.0 beta694.0.0 beta704.0.0 beta714.0.0 beta724.0.0 beta734.0.0 beta744.0.0 beta754.0.0 beta764.0.0 beta774.0.0 beta784.0.0 beta794.0.0 beta804.0.0 beta814.0.0 beta824.0.0 beta834.0.0 beta844.0.0 beta854.0.0 beta864.0.0 beta874.0.0 beta884.0.0 beta894.0.0 beta904.0.0 beta914.0.0 beta924.0.0 beta934.0.0 beta944.0.0 beta954.0.0 beta964.0.0 beta974.0.0 beta984.0.0 beta99
v < 4.0.0-beta.361
Affected range stops below 4.0.0-beta.361, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://github.com/coollabsio/coolify/security/advisories/GHSA-f2gf-jvmh-vq73SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
6.1MEDIUMCISA-ADP
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- REQUIRED
- Scope
- CHANGED
- Confidentiality
- LOW
- Integrity
- LOW
- Availability
- NONE
Vector?
Quick Info
StatusANALYZED
CWE
CWE-116
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card