CVE-2025-28923

Summary

CVE-2025-28923 is a newly identified vulnerability that affects the No Disposable Email application, specifically versions from n/a to 2.5.1. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes Stored XSS (Cross-Site Scripting) capabilities. An attacker who successfully exploits this flaw can inject malicious scripts into a user's web browser, potentially stealing sensitive information or performing unauthorized actions on behalf of the victim. Users are strongly encouraged to update to the latest version of No Disposable Email to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.