CVE-2025-30561

Summary

CVE-2025-30561 is a newly disclosed vulnerability affecting Henrique Mouta CAS Maestro, a popular web application for managing Central Authentication Services. The vulnerability is a Cross-Site Request Forgery (CSRF) issue that grants attackers the ability to inject malicious code via Stored Cross-Site Scripting (XSS) attacks. Those utilizing CAS Maestro versions from n/a to 1.1.3 are at risk. Successful exploitation could lead to unauthorized data manipulation, session hijacking, or other malicious activities. Users are advised to upgrade to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.