CVE-2025-1643

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SG_AlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
References
Link Resource
https://github.com/yago3008/cves Third Party Advisory
https://vuldb.com/?ctiid.296693 Permissions Required VDB Entry
https://vuldb.com/?id.296693 VDB Entry Permissions Required
https://vuldb.com/?submit.500574 VDB Entry Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:modernasistemas:modernanet:*:*:*:*:*:*:*:*

History

28 Feb 2025, 01:55

Type Values Removed Values Added
CPE cpe:2.3:a:modernasistemas:modernanet:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : 8.8
First Time Modernasistemas modernanet
Modernasistemas
References () https://vuldb.com/?id.296693 - () https://vuldb.com/?id.296693 - VDB Entry, Permissions Required
References () https://github.com/yago3008/cves - () https://github.com/yago3008/cves - Third Party Advisory
References () https://vuldb.com/?ctiid.296693 - () https://vuldb.com/?ctiid.296693 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.500574 - () https://vuldb.com/?submit.500574 - VDB Entry, Exploit, Third Party Advisory

25 Feb 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-25 01:15

Updated : 2025-02-28 01:55


NVD link : CVE-2025-1643

Mitre link : CVE-2025-1643


JSON object : View

Products Affected

modernasistemas

  • modernanet
CWE
CWE-862

Missing Authorization

CWE-352

Cross-Site Request Forgery (CSRF)