PT-2025-7807

CVE-2025-1644

Published

2025-02-25

Updated

2025-02-25

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Benner ModernaNet versions prior to 1.2.1

Description A problematic issue has been found, affecting an unknown function of the file /DadosPessoais/SG Gravar. The manipulation of the idItAg argument leads to cross-site request forgery. This issue can be exploited remotely.

Recommendations For versions prior to 1.2.1, upgrade to version 1.2.1 to address this issue. As a temporary workaround, consider restricting access to the /DadosPessoais/SG Gravar file until the upgrade is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Y4G0

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

CWE-862: Missing Authorization

Related identifiers