CVE-2025-25379: CSRF
Published Feb 28, 2025
·Updated
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
Affected Software
2 affected components
07FLYCMS 07FLYCMS
07FLY 07FLYCMS=1.3.9
Event History
Feb 28, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2025-25379?
The severity of CVE-2025-25379 is critical due to its potential for remote code execution.
2
How does CVE-2025-25379 work?
CVE-2025-25379 exploits a Cross Site Request Forgery vulnerability in 07FLYCMS by manipulating the id parameter in the del.html component.
3
How do I fix CVE-2025-25379?
To fix CVE-2025-25379, update to the latest version of 07FLYCMS that addresses this vulnerability.
4
Who is affected by CVE-2025-25379?
Users of 07FLYCMS version 1.3.9 are affected by CVE-2025-25379 due to the CSRF vulnerability.
5
What kind of attacks can CVE-2025-25379 facilitate?
CVE-2025-25379 can facilitate attacks that allow remote attackers to execute arbitrary code on the affected system.