Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-62687 EUVD-2025-198428GHSA-4mr3-hh84-8hpp

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations m…

Published Nov 21, 2025 · Updated Nov 21, 2025 · Assigned by jpcert

Vendor: LogStare Product: LogStare Collector (for Linux) Product: LogStare Collector (for Windows) Platform: Linux Platform: Windows

Description

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.

Affected products

VendorProductAffectedFixed
LogStare LogStare Collector (for Windows) 2.4.1 and earlier —
LogStare LogStare Collector (for Linux) 2.4.1 and earlier —

References