PT-2025-12588
CVE-2025-30535
·
Published
2025-03-24
·
Updated
2025-03-24
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
muro External image replace versions n/a through 1.0.8
Description
The issue is a Cross-Site Request Forgery (CSRF) vulnerability that affects the External image replace function, allowing for Cross Site Request Forgery.
Recommendations
For versions n/a through 1.0.8, as a temporary workaround, consider disabling the External image replace function until a patch is available. Restrict access to the External image replace module to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾