CVE-2025-23800
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 16, 2025
CWE ID 352
Summary
CVE-2025-23800 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the David Hamilton OrangeBox software. This issue allows malicious actors to manipulate a user's session and execute unintended actions on their behalf. The OrangeBox software, which has a version range from n/a through 3.0.0, is the affected product. Users are advised to update to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.