CVE-2025-28859

Summary

CVE-2025-28859 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the CodeVibrant Maintenance Notice from versions n/a through 1.0.5. An attacker can exploit this issue by crafting a malicious request and tricking a user into visiting a specially crafted website. This may allow the attacker to perform unintended actions on behalf of the victim, such as modifying their account settings or making unauthorized transactions. The vulnerability occurs due to insufficient input validation in the Maintenance Notice component, making it essential for users to upgrade to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.