Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA EN FR

Medium 6.5

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanism...

CVE-2025-63716 First seen on SecPulse Nov 8, 2025

References

exploit cve@mitre.org
web cve@mitre.org

Key facts

CVSS v3: Medium 6.5; CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Published: Nov 8, 2025
First seen on SecPulse: Nov 8, 2025
CWE: CWE-352

NVD

Tags(click for explanation)

Attack Types

Cross-Site Request Forgery

CWE

CWE-352

All

Rems Leads Manager Tool

Detection sources

NIST National Vulnerability DatabaseNov 5, 23:10

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details