Description
tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.
High · 8.8
CVE-2025-25907
EUVD-2025-7685GHSA-6cwg-xfh5-wxwq
tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows atta…
Published Mar 10, 2025 · Updated Mar 11, 2025 · Assigned by mitre