8 matches found
CVE-2025-66906
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
EUVD-2025-204543
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
CVE-2025-66906
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
PT-2025-52455
Name of the Vulnerable Software and Affected Versions Turms versions through 0.10.0-SNAPSHOT Description A Cross Site Request Forgery CSRF issue exists in the Turms Admin API. Successful exploitation could allow attackers to gain escalated privileges. The API endpoints and vulnerable parameters a...
CVE-2025-66906: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
CVE-2025-66906
A Cross Site Request Forgery (CSRF) vulnerability exists in the Turms Admin API (specifically in turms v0.10.0-SNAPSHOT and prior versions). This flaw allows an attacker to perform unauthorized actions that can lead to escalated privileges . Turms is described as an instant messaging engine from ...