CVE-2025-14117: fit2cloud Halo cross-site request forgery
A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14117?
CVE-2025-14117 has been classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2025-14117?
To fix CVE-2025-14117, it is recommended to update to the latest version of Fit2cloud Halo, where the vulnerability is addressed.
What type of vulnerability is CVE-2025-14117?
CVE-2025-14117 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
Can CVE-2025-14117 be exploited remotely?
Yes, CVE-2025-14117 can be exploited remotely, allowing attackers to execute unauthorized actions.
What is the impact of CVE-2025-14117?
The impact of CVE-2025-14117 includes potential unauthorized actions being taken on behalf of users without their consent.