Skip to content
1.
Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.
← back | CVE Intelligence
CVE-2025-0133
Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-0133.
- Coverage Span
- 2025-06-18 → 2025-06-24
- Reports
- 2 related reports
Associated Reports & Timeline
2.
bugcrowd.com | vulnerability | | original ↗ | #vulnerability | #vpn | #palo-alto-networks | #globalprotect
CVE-2025-0133 in Palo Alto Networks' GlobalProtect VPN gateway lets attackers hijack sessions via a tampered link. Bugcrowd's Casey Ellis and Von Tran explain the impact for defenders and hackers.