---
id: 5219
title: "[CVE-2025-0133] Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN"
cve: CVE-2025-0133
source_domain: xbow.com
source_url: "https://xbow.com/blog/xbow-globalprotect-xss"
published_at: "2025-06-24T12:00:00Z"
tags: ["bug-bounty", "vulnerability-research", "xss", "vpn", "cve-2025-0133", "globalprotect", "palo-alto"]
phying_url: "https://phying.com/item/5219"
lang: en
---

# [CVE-2025-0133] Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

## Summary

Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.

## Intelligence Metadata

- **Sources:** xbow.com
- **CVE:** CVE-2025-0133
- **Published:** 2025-06-24T12:00:00Z
- **Original:** https://xbow.com/blog/xbow-globalprotect-xss
- **Phying News:** https://phying.com/item/5219