Threats Tagged 'cve-2025-55045'

CVE-2025-55045 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability in MuraCMS up to version 10.1.10 affecting the updateAddress function. The vulnerability arises because this function does not validate CSRF tokens, allowing attackers to craft malicious web pages that, when visited by an authenticated administrator, automatically submit requests to add, modify, or delete user address information. Exploitation can lead to unauthorized changes in user contact details, including injection of attacker-controlled email addresses and phone numbers, potentially redirecting sensitive communications and disrupting business operations. This manipulation compromises data integrity and user privacy and may facilitate social engineering attacks. The vulnerability requires the administrator to visit a malicious webpage but does not require additional privileges or complex conditions. Although no known exploits are currently reported in the wild, the vulnerability's ease of exploitation and impact on integrity warrant urgent attention. Organizations using MuraCMS should prioritize patching or implementing mitigations to prevent unauthorized address manipulation.

HighVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve#cve-2025-55045