PT-2025-19923 · Mrcms · Mrcms

·

CVE-2025-4327

·

Published

2025-05-06

·

Updated

2025-06-12

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions MRCMS version 3.1.2
Description A vulnerability was found in MRCMS, classified as problematic, affecting an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints might be affected.
Recommendations As a temporary workaround, consider restricting access to all API endpoints until a patch is available. Avoid using any functionality that may be related to the unknown affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-4327

Affected Products

Mrcms