High · 7.3 CVE-2025-60535 EUVD-2025-34263GHSA-99gm-xgqq-4fwh

A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary op…

Published Oct 14, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.

References

https://github.com/ellite/Wallos/
https://github.com/vityuasd/VulList/blob/main/CVE-2025-60535.md