CVE-2025-20129

CVE-2025-20129 is a medium-severity vulnerability affecting the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMiner, and Cisco Unified Contact Center Express. It stems from improper sanitization of HTTP requests, allowing an unauthenticated, remote attacker to redirect chat traffic. A successful exploit could lead to the disclosure of sensitive user data, as the attacker can redirect conversations to a server under their control. While there are no known public exploits or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion and media coverage, indicating heightened awareness.