CVE-2025-31010
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 28, 2025
CWE ID 352
Summary
CVE-2025-31010 is a Cross-Site Request Forgery (CSRF) vulnerability affecting ReichertBrothers SimplyRETS Real Estate IDX. This issue enables an attacker to submit malicious requests on behalf of a victim, potentially leading to unauthorized modifications or actions within the IDX system. The vulnerability affects SimplyRETS Real Estate IDX versions from n/a through 3.0.3. It is essential for users to upgrade their IDX instances to a secure version or implement appropriate CSRF countermeasures to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.