CVE-2025-23884
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 16, 2025
CWE ID 352
Summary
CVE-2025-23884 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Chris Roberts Annie software. This issue allows malicious actors to manipulate user actions and make unintended changes to their data. Specifically, Annie versions from n/a to 2.1.1 are vulnerable to this CSRF attack. Users of these versions are advised to update their software to mitigate this risk and protect against potential unauthorized actions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.