CVE-2025-24982

Summary

CVE-2025-24982 is a cross-site request forgery (CSRF) vulnerability affecting Activity Log WinterLock versions below 1.2.5. This issue allows an attacker to trick a user into performing unwanted actions, such as deleting log data, by making them visit a maliciously crafted webpage while they are still logged in. This could potentially lead to data loss and unauthorized modifications. Users are strongly advised to upgrade to the latest version of Activity Log WinterLock to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.