CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/02/23 12:19 a.m.•22 views

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

5.1CVSS6.8AI score0.00172EPSS

SaveExploits1References1

NVD•added 2025/02/21 7:15 p.m.•22 views

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

5.1CVSS0.00172EPSS

SaveExploits1References1

Vulnrichment•added 2025/02/21 12:00 a.m.•10 views

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

6.5AI score0.00172EPSS

SaveExploits1References1

Cvelist•added 2025/02/21 12:00 a.m.•39 views

CVE-2025-25772

A Cross-Site Request Forgery CSRF in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request...

0.00172EPSS

SaveExploits1References1

CVE•added 2025/02/21 12:00 a.m.•97 views

CVE-2025-25772

The content management system Jspxcms versions v9.0 through v9.5 is vulnerable to a Cross-Site Request Forgery (CSRF) in the /back/UserController.java component. This flaw allows an attacker to arbitrarily add Administrator accounts by sending a crafted request, leading to unauthorized account cr...

5.1CVSS6.5AI score0.00172EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by