CVE-2025-24749 is a high-severity CSRF vulnerability in EZPZ SAML SP Single Sign On (SSO) by Overt Software Solutions LTD, affecting versions through 1.2.5. This vulnerability allows attackers to trick authenticated users into submitting unauthorized requests, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is identified as CWE-352. No official fix or mitigation has been published yet, and no known exploits have been reported.

Successful exploitation of this CSRF vulnerability could allow an attacker to perform unauthorized actions with the privileges of an authenticated user, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, there are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious with the use of EZPZ SAML SP Single Sign On (SSO) and consider implementing additional CSRF protections at the application or network level if possible. Monitor vendor communications for updates.