CVE-2025-55573: newapi new_api
Analyzed
Published 22-08-2025Last modified 22-08-2025
Vulnerability summary
CVE-2025-55573 is a high (CVSS 8.8) vulnerability in newapi new_api. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 36.4% of scored vulnerabilities. 1 public exploit is recorded.
Priority
Prioritisepublic exploit
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?CVSS score
8.8/10
010
High · v3.1 (CVE.org)EPSS score
0.42%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1github
Timeline
- 22-08-2025PublishedVulnerability first disclosed.
- 22-08-2025Last modifiedVulnerability information updated.
Description
QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).
CVSS metrics
2 scores · 2 sources · 1 versionHigh 8.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 2 agree
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.42%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.42% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundDocs
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Newapi1 product
- new_api≤ 0.8.5.2
1 vendor · 1 product