CVE-2025-60535 - CERT CVE

  1. CVE-2025-60535

ID CVE-2025-60535
Sažetak A Cross-Site Request Forgery (CSRF) in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request.
Reference
CVSS
Base: 7.3
Impact: 3.4
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW LOW
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Zadnje važnije ažuriranje 14-10-2025 - 19:35
Objavljeno 14-10-2025 - 17:16