CVE-2025-63717: CSRF
The change password functionality at /petgrooming/admin/changepass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks. The application does not implement adequate anti-CSRF tokens or same-site cookie restrictions, allowing attackers to trick authenticated users into unknowingly changing their passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63717?
CVE-2025-63717 has a medium severity level due to its potential to allow unauthorized access through CSRF attacks.
How do I fix CVE-2025-63717?
To fix CVE-2025-63717, implement anti-CSRF tokens and enforce same-site cookie attributes in the change password functionality.
Which software is affected by CVE-2025-63717?
CVE-2025-63717 affects SourceCodester Pet Grooming Management Software version 1.0.
What type of vulnerability is CVE-2025-63717?
CVE-2025-63717 is a Cross-Site Request Forgery (CSRF) vulnerability.
What can attackers do with CVE-2025-63717?
With CVE-2025-63717, attackers can exploit the application to change user passwords without authorization.