Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/20 12:12 a.m.•32 views

CVE-2025-66906

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

6.1CVSS7AI score0.00134EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/19 6:31 p.m.•15 views

EUVD-2025-204543

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

6.1CVSS6.5AI score0.00134EPSS
SaveExploits1References3
NVD
NVD
•added 2025/12/19 4:15 p.m.•40 views

CVE-2025-66906

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

6.1CVSS0.00134EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•21 views

PT-2025-52455

Name of the Vulnerable Software and Affected Versions Turms versions through 0.10.0-SNAPSHOT Description A Cross Site Request Forgery CSRF issue exists in the Turms Admin API. Successful exploitation could allow attackers to gain escalated privileges. The API endpoints and vulnerable parameters a...

6.1CVSS7.1AI score0.00134EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•2 views

CVE-2025-66906: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

6.1CVSS5.8AI score0.00134EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/19 12:00 a.m.•42 views

CVE-2025-66906

A Cross Site Request Forgery (CSRF) vulnerability exists in the Turms Admin API (specifically in turms v0.10.0-SNAPSHOT and prior versions). This flaw allows an attacker to perform unauthorized actions that can lead to escalated privileges . Turms is described as an instant messaging engine from ...

6.1CVSS5.9AI score0.00134EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/12/19 12:00 a.m.•48 views

CVE-2025-66906

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

0.00134EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/19 12:00 a.m.•15 views

CVE-2025-66906

Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...

6.1CVSS6.9AI score
SaveExploits0References4
Rows per page
Query Builder