CVE-2025-12479

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description A systemic lack of Cross-Site Request Forgery (CSRF) token implementation exists. This complete absence of CSRF protections in BLU-IC controllers allows for trivial account takeover and system manipulation. Cross-Site Request Forgery (CSRF) is a type of web security flaw that allows an attacker to induce a user to perform actions on a web application in which they’re currently authenticated.

Recommendations BLU-IC2 versions through 1.19.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability. BLU-IC4 versions through 1.19.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability.