CVE-2025-25103

Summary

CVE-2025-25103 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Indeed API. This issue enables attackers to submit malicious requests on behalf of users who have previously authenticated and interacted with the API. The vulnerability spans from an unspecified version up to 0.5. A successful exploit of this CSRF vulnerability could lead to unauthorized modifications or actions within the API, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.