Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-48497 EUVD-2025-19185GHSA-r7vp-cpwx-3ghg

Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL wh…

Published Jun 26, 2025 · Updated Jun 26, 2025 · Assigned by jpcert

Description

Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL while being logged in to the affected product, arbitrary learning histories may be registered.

Affected products

VendorProductAffectedFixed
iroha Soft iroha Board versions v0.10.12 and earlier —

References