← All advisories

Unrated severityOSV Advisory· Published Dec 19, 2025· Updated Dec 19, 2025

CVE-2025-66906

CVE-2025-66906

Description

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Turms Im/TurmsOSV2 versions
v0.10.0-SNAPSHOT+ 1 more
- (no CPE)range: v0.10.0-SNAPSHOT
- (no CPE)range: <=0.10.0-SNAPSHOT

Patches

Vulnerability mechanics

References

1

github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.mdmitre

News mentions

0

No linked articles in our index yet.