NuytsTech Security

CVE-2025-25907

by ·

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

Assigner : cve@mitre.org

More information : https://github.com/xujeff/tianti/issues/39

Tags: