CVE-2025-6664

Опубликовано: 25 июн. 2025

Источник: nvd

CVSS3: 4.3

CVSS2: 5

EPSS Низкий

Описание

A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Ссылки

https://codeastro.com/
Product
https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF.md
Exploit
Third Party Advisory
https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF.md#-steps-to-reproduce
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.313878
Permissions Required
VDB Entry
https://vuldb.com/?id.313878
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.602323
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:codeastro:patient_record_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00043

Низкий

4.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-8fpv-rrg6-x635