CVE-2025-30576

Summary

CVE-2025-30576 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the HuangYe WuDeng Hacklog Remote Image Autosave. This issue enables an attacker to manipulate a user's session, potentially leading to unauthorized actions. The vulnerability is present in versions from n/a to 2.1.0 of the Hacklog Remote Image Autosave component. An attacker can exploit this flaw by tricking a user into visiting a malicious website, which then sends a malicious request on the user's behalf to the affected system, resulting in unwanted changes or data modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.