CVE-2025-65472: CSRF
A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65472?
CVE-2025-65472 has a high severity as it allows attackers to escalate privileges to Administrator through Cross-Site Request Forgery.
How do I fix CVE-2025-65472?
To fix CVE-2025-65472, update EasyImages to version 2.8.7 or later, which addresses the CSRF vulnerability.
What components are affected by CVE-2025-65472?
CVE-2025-65472 affects the /admin/admin.inc.php component of EasyImages version 2.8.6 and below.
What type of attack is associated with CVE-2025-65472?
CVE-2025-65472 is associated with a Cross-Site Request Forgery (CSRF) attack.
Who can be targeted by CVE-2025-65472?
CVE-2025-65472 can target users of EasyImages, specifically allowing privilege escalation via user interaction with a malicious web page.