CVE-2025-15095 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-15095 Interim 1 1 2026-03-05T01:24:20Z current 2026-03-05T01:24:20Z 2026-03-05T01:24:20Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-15095 A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the file httpbin-master/httpbin/core.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 python-httpbin python3-httpbin python311-httpbin python313-httpbin python311-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python311-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python311-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python-httpbin as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python-httpbin as a component of SUSE Linux Enterprise Module for Public Cloud 12 python3-httpbin as a component of SUSE Linux Enterprise Module for Public Cloud 12 python311-httpbin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python-httpbin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-httpbin as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python-httpbin as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python311-httpbin as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python-httpbin as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python311-httpbin as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python-httpbin as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python311-httpbin as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python-httpbin as a component of SUSE Linux Enterprise Server 15 SP6-LTSS python313-httpbin as a component of SUSE Linux Enterprise Server 16.0 python-httpbin as a component of SUSE Linux Enterprise Server 16.0 python-httpbin as a component of SUSE Linux Enterprise Server Teradata 15 SP4 python311-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python311-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python311-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python-httpbin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 python313-httpbin as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python-httpbin as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python311-httpbin as a component of openSUSE Leap 15.6 python-httpbin as a component of openSUSE Leap 15.6 A security vulnerability has been detected in postmanlabs httpbin up to 0.6.1. This affects an unknown function of the file httpbin-master/httpbin/core.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. CVE-2025-15095 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python-httpbin SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-httpbin SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python-httpbin SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-httpbin SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python-httpbin SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-httpbin SUSE Linux Enterprise Module for Python 3 15 SP6:python-httpbin SUSE Linux Enterprise Module for Python 3 15 SP6:python311-httpbin SUSE Linux Enterprise Module for Python 3 15 SP7:python-httpbin SUSE Linux Enterprise Module for Python 3 15 SP7:python311-httpbin SUSE Linux Enterprise Server 15 SP4-LTSS:python-httpbin SUSE Linux Enterprise Server 15 SP4-LTSS:python311-httpbin SUSE Linux Enterprise Server 15 SP5-LTSS:python-httpbin SUSE Linux Enterprise Server 15 SP5-LTSS:python311-httpbin SUSE Linux Enterprise Server 15 SP6-LTSS:python-httpbin SUSE Linux Enterprise Server 15 SP6-LTSS:python311-httpbin SUSE Linux Enterprise Server 16.0:python-httpbin SUSE Linux Enterprise Server 16.0:python313-httpbin SUSE Linux Enterprise Server Teradata 15 SP4:python-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP4:python-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP5:python-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP5:python311-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP6:python-httpbin SUSE Linux Enterprise Server for SAP Applications 15 SP6:python311-httpbin SUSE Linux Enterprise Server for SAP applications 16.0:python-httpbin SUSE Linux Enterprise Server for SAP applications 16.0:python313-httpbin openSUSE Leap 15.6:python-httpbin openSUSE Leap 15.6:python311-httpbin moderate 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N