CVE-2025-47410: Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on behalf of the authenticated user.
This issue affects Apache Geode: versions 1.10 through 1.15.1
Users are recommended to upgrade to version 1.15.2, which fixes the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.geode:geode-webto a version that resolves this vulnerability.Fixed in 1.15.2 - Upgrade
Upgrade
Apache Geodeto a version that resolves this vulnerability.Fixed in 1.15.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47410?
CVE-2025-47410 is rated as a moderate severity vulnerability due to its potential for CSRF attacks.
How can CVE-2025-47410 be mitigated?
To mitigate CVE-2025-47410, it is recommended to implement anti-CSRF tokens and ensure security controls are in place for session management.
What versions of Apache Geode are affected by CVE-2025-47410?
CVE-2025-47410 affects Apache Geode versions from 1.10 to 1.15.1 inclusive.
What type of attack does CVE-2025-47410 involve?
CVE-2025-47410 involves Cross-Site Request Forgery (CSRF) attacks targeting the Management and Monitoring REST API.
What can an attacker achieve by exploiting CVE-2025-47410?
An attacker exploiting CVE-2025-47410 could submit malicious commands on behalf of an authenticated user, compromising the target system.