CVE-2025-69238

MEDIUM

4.3

Descripcion

Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. Attacker can craft special website, which when visited by the authenticated victim, will automatically send POST request to the endpoint (e. x. deletion of the data) without enforcing token verification. This issue was fixed in version 1.4.6.

Detalles CVE

Puntuacion CVSS v3.14.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado3/16/2026

Ultima modificacion3/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

raytha:raytha

Debilidades (CWE)

CWE-352

Referencias

https://cert.pl/en/posts/2026/03/CVE-2025-69236(cvd@cert.pl)

https://raytha.com(cvd@cert.pl)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.