CVE-2025-25907

creationtimestamp| type| source ---|---|--- 2025-03-11 00:54:12+00:00| seen| https://t.me/cvedetector/20006 2025-03-11 03:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114141752650435125 2025-03-11 04:41:13+00:00| seen|...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-25907

The tianti JAVA lightweight CMS solution (v2.3) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within the /user/ajax/save component. An attacker can exploit this by sending a crafted GET or POST request to perform arbitrary operations. As no official patch is currently available, the r...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...