CVE-2025-2420
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Mar 17, 2025
Updated: Mar 18, 2025
CWE ID 863
Summary
CVE-2025-2420 is a recently disclosed vulnerability affecting an unknown functionality in 猫宁i Morning, with the version range not specified. This issue results in cross-site request forgery, enabling remote attackers to manipulate user actions. The exploit is publicly known, posing a significant risk. The affected product follows a rolling release model, making it difficult to determine the exact versions with the vulnerability and those with the fix.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- iOS
- iPadOS
- Apple (iPhone OS)
Affected Vendors
- Apple