← All advisories

High severity7.8NVD Advisory· Published Sep 18, 2025· Updated Apr 15, 2026

CVE-2025-50255

CVE-2025-50255

Description

Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request.

Affected products

1

Smartvista/Smartvista BackOfficellm-create
Range: =2.2.22

Patches

Vulnerability mechanics

References

1

gitlab.com/c2at3/cve-2025-50255/-/blob/main/Bypassing_CSRF_Protection_in_Smartvista-BackOffice.pdfnvd

News mentions

0

No linked articles in our index yet.

CVE-2025-50255 · High · VYPR