Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/02/07 6:06 p.m.•13 views

CVE-2025-24982

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted...

4.3CVSS6.7AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/04 4:18 a.m.•38 views

CVE-2025-24982

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted...

4.3CVSS0.0017EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/04 4:18 a.m.•7 views

CVE-2025-24982

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted...

4.3CVSS4.6AI score0.0017EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•0 views

CVE-2025-24982: Cross-Site Request Forgery (CSRF)

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted...

4.3CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•14 views

PT-2025-5613 · Unknown · Activity Log Winterlock

Name of the Vulnerable Software and Affected Versions: Activity Log WinterLock versions prior to 1.2.5 Description: A cross-site request forgery issue exists. If a user views a malicious page while logged in, the log data may be deleted. Recommendations: For versions prior to 1.2.5, update to...

4.3CVSS9.6AI score0.0017EPSS
SaveExploits0References6
Rows per page
Query Builder