VULNERABILITY INTELLIGENCE
CVE-2025-1644
CVSS score4.3 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2025-02-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SG_Gravar. The manipulation of the argument idItAg leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 1.2.1 is able to address this issue. It is recommended to upgrade the affected component.
Weakness classification
- cna@vuldb.com: CWE-352
- nvd@nist.gov: CWE-352
Primary references
- cna@vuldb.com — Third Party Advisory
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry