CVE-2025-4375: Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA
Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affects Pro Cloud Server: earlier than 6.0.165.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4375?
CVE-2025-4375 has a critical severity level due to the potential for session hijacking through Cross-Site Request Forgery.
How do I fix CVE-2025-4375?
To fix CVE-2025-4375, update Sparx Systems Pro Cloud Server to version 6.1 or later where the vulnerability is addressed.
What type of vulnerability is CVE-2025-4375?
CVE-2025-4375 is a Cross-Site Request Forgery (CSRF) vulnerability.
Which versions of Sparx Systems Pro Cloud Server are affected by CVE-2025-4375?
Sparx Systems Pro Cloud Server versions up to and including 6.0.165 are affected by CVE-2025-4375.
What can an attacker achieve by exploiting CVE-2025-4375?
An attacker exploiting CVE-2025-4375 can perform session hijacking and potentially change the Pro Cloud Server Configuration password.