CVE-2025-23820

Summary

CVE-2025-23820 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Content Security Policy Pro from version n/a through 1.3.5. Malicious actors can exploit this issue to perform unintended actions on behalf of a user, potentially leading to data theft or unauthorized system changes. The CSRF flaw enables attackers to hijack user sessions and submit malicious requests to the server, bypassing the user's expected actions and intentions. This vulnerability highlights the importance of implementing robust CSRF protection mechanisms in web applications to secure user data and prevent unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.