CoreCVE
Back

MEDIUM

Cross-Site Request Forgery vulnerability in Pro Cloud Server's WebEA

Published May 9, 2025

Description

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affects Pro Cloud Server: earlier than 6.0.165.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner NCSC-FI
Published May 9, 2025
Updated May 9, 2025
Reserved May 6, 2025
Link CVE-2025-4375
CISA Vulnrichment
Updated May 9, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-4375
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-4375