Skip to content
OpenAdvisories
High · 8.0 CVE-2025-27910 EUVD-2025-7818GHSA-v888-xcc4-jmr2

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allow…

Published Mar 10, 2025 · Updated Mar 12, 2025 · Assigned by mitre

Description

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

References