exploitDog

CVE-2025-27910

Опубликовано: 10 мар. 2025

Источник: nvd

CVSS3: 8

EPSS Низкий

Описание

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

Ссылки

https://github.com/xujeff/tianti/issues/39
Exploit
Issue Tracking
Third Party Advisory
https://github.com/xujeff/tianti/issues/39
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tianti_project:tianti:2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-v888-xcc4-jmr2

CVSS3: 8

github

11 месяцев назад

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

EPSS

Процентиль: 18%

0.00056

Низкий

8 High

CVSS3

Дефекты

CWE-352