← All advisories

Medium severity6.1OSV Advisory· Published Dec 19, 2025· Updated Jun 17, 2026

CVE-2025-66906

CVE-2025-66906

Description

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Turms Im/TurmsOSV3 versions
v0.10.0-SNAPSHOT+ 2 more
- (no CPE)range: v0.10.0-SNAPSHOT
- cpe:2.3:a:turms-im:turms:0.10.0-snapshot:*:*:*:*:*:*:*
- (no CPE)range: <=0.10.0-SNAPSHOT

Patches

Vulnerability mechanics

References

1

github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.