CVE-2025-31439

Summary

CVE-2025-31439 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the tobias_.MerZ Browser Caching module with .htaccess. This issue allows attackers to submit malicious requests on behalf of a user, potentially leading to unintended actions within the affected system. The vulnerability has been identified in versions 1.2.1 and above of the Browser Caching module with .htaccess. Successful exploitation of this weakness could result in unauthorized modifications or data access, posing a significant risk to the security of affected applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.