CVE-2025-63711: CVE-Research-2025 · Cross-Site Request Forgery (CSRF)
Affects CVE-Research-2025Source CVE Database V5
Not known to be exploited · CVSS 7.1 High.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 11% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:LExploitation evidence
Disclosed: evidence found.
CVE published 10 Nov 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
GitHubfloccocam-cpu/CVE-Research-2025pkg:github/floccocam-cpu/CVE-Research-2025Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
- Immediately implement server-side CSRF protections by introducing anti-CSRF tokens in all state-changing requests, especially the user deletion endpoint.
- Enforce strict authentication and authorization checks on sensitive endpoints to ensure only properly authenticated and authorized users can perform deletions.
- Restrict HTTP methods to only those necessary (e.g., POST) and validate the origin or referer headers to detect and block cross-origin requests.
- Educate administrative users about the risks of visiting untrusted websites while logged into administrative sessions to reduce the risk of social engineering attacks.
- If possible, deploy web application firewalls (WAFs) with rules to detect and block suspicious CSRF attack patterns targeting the deletion endpoint.
- Monitor logs for unusual user deletion activities and implement alerting for anomalous administrative actions.
- Plan for an urgent software update or patch deployment once available from the vendor.
- Consider isolating administrative interfaces behind VPNs or IP whitelisting to reduce exposure.
- Conduct regular security audits and penetration testing focused on CSRF and authorization controls to identify and remediate similar vulnerabilities.
Description
CVE-2025-63711 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability in SourceCodester Client Database Management System 1.0. It allows remote attackers to trick authenticated administrative users into unintentionally deleting user accounts by visiting a malicious webpage. The vulnerability arises because the user deletion endpoint lacks CSRF protections and proper authorization checks, accepting POST requests with a user_id parameter without verifying request origin. Exploitation requires the admin to be authenticated and to interact with the malicious content, potentially leading to arbitrary user deletions and disruption of system integrity. No known exploits are currently in the wild, and no patches have been published yet. European organizations using this system should prioritize mitigation to prevent unauthorized user account removals.