Description
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
Medium · 6.1
CVE-2025-66906
EUVD-2025-204543GHSA-6jch-g84g-hpwx
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
Published Dec 19, 2025 · Updated Dec 19, 2025 · Assigned by mitre