CVE-2025-22963

Summary

CVE-2025-22963 is a vulnerability affecting Teedy before version 1.12. An attacker can exploit this Cross-Site Request Forgery (CSRF) weakness to perform unauthorized account takeovers. The issue lies in the /api/user/admin endpoint, which fails to adequately protect against CSRF attacks. Successful exploitation allows the attacker to manipulate user actions, including account modifications, without the user's consent. This can lead to significant security implications, including unauthorized access or modification of sensitive data. To mitigate this risk, users are advised to upgrade to the latest version of Teedy as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.