CVE-2025-59894 in Sync Breeze Enterprise Server情報

要約

〜によって MITRE • 2026年01月28日

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause another user to perform unwanted actions within the application they are logged into. This vulnerability is possible due to the lack of proper CSRF token implementation. Among other things, it is possible, using a POST request to delete all commands via '/delete_all_commands?sid='.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

INCIBE

予約する

2025年09月23日

公開

2026年01月28日

モデレーション

承諾済み

エントリ

VDB-343211

CPE

準備完了

CWE

CWE-352 (確認済み)

CVSS

8.0 (NVD)

EPSS

0.00129

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-59894
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-59894
CVE Details	https://www.cvedetails.com/cve/CVE-2025-59894/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!