CVE-2025-30557

Summary

CVE-2025-30557 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Easy 301 Redirects module of odihost. This issue enables attackers to force unintended actions on a user's browser, bypassing their authentication and potentially gaining access to sensitive data. The flaw, which affects versions 1.33 and below, can be exploited through maliciously crafted websites or links. Attackers can manipulate the victim's session to perform unauthorized actions, such as deleting or modifying data, without their consent. To mitigate this risk, users are advised to update their Easy 301 Redirects module to the latest version or implement CSRF tokens to secure their requests.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.