CVE-2025-22563
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 352
Summary
CVE-2025-22563 is a Cross-Site Request Forgery (CSRF) vulnerability that affects the Pretty Url component, version 1.5.4 and older. An attacker can exploit this issue to induce unintended actions on a victim's web application, potentially leading to session hijacking or data theft. The vulnerability arises due to insufficient input validation and authorization checks, enabling an attacker to craft malicious requests and execute them on behalf of the victim. Users are advised to upgrade to a patched version of Pretty Url to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.