CVE-2025-25907

creationtimestamp| type| source ---|---|--- 2025-03-11 00:54:12+00:00| seen| https://t.me/cvedetector/20006 2025-03-11 03:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114141752650435125 2025-03-11 04:41:13+00:00| seen|...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-25907

tianti v2.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request...

CVE-2025-25907

CVE-2025-25907 affects the tianti CMS, version 2.3. The issue is a Cross-Site Request Forgery (CSRF) in the component /user/ajax/save that allows an attacker to cause arbitrary operations via a crafted GET or POST request. The primary consequence is unauthorized actions performed with the user’s ...