Skip to content
OpenAdvisories
Low · 3.7 CVE-2025-58272 EUVD-2025-26635GHSA-3fhh-xmh3-m9q5

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page cr…

Published Sep 3, 2025 · Updated Sep 3, 2025 · Assigned by jpcert

Vendor: NTT EAST Vendor: NTT WEST Product: Web Caster V130 Product: Web Caster V130

Description

Cross-site request forgery vulnerability exists in Web Caster V130 versions 1.08 and earlier. If a logged-in user views a malicious page created by an attacker, the settings of the product may be unintentionally changed.

Affected products

VendorProductAffectedFixed
NTT EAST Web Caster V130 1.08 and earlier —
NTT WEST Web Caster V130 1.08 and earlier —

References