HIGH
Laundry 2.3.0 - Account Takeover via CSRF
Published Jul 2, 2025
8.5
HIGHCVSS 4.0
EPSS 0.23%
Description
Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0.
Affected products
-
- Version 2.3.0StatusaffectedConstraints-
- Version
AND
- 2.3.0
Running on/with
OR
- n/a
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19748 Advisory
- https://fluidattacks.com/advisories/tort exploitthird-party-advisoryThird Party Advisory
- https://github.com/mohaiminur/laundry product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19748 | Advisory | |
| https://fluidattacks.com/advisories/tort | exploitthird-party-advisoryThird Party Advisory | |
| https://github.com/mohaiminur/laundry | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Fluid Attacks
Published Jul 2, 2025
Updated Jul 2, 2025
Reserved Jun 19, 2025
Link CVE-2025-52841
CISA Vulnrichment
Updated Jul 2, 2025
ENISA EUVD
EUVD-2025-19748 Assigner Fluid Attacks
Published Jul 2, 2025
Updated Jul 2, 2025
Exploited since n/a
Link EUVD-2025-19748