CVE-2025-1643

5.3 mediumEPSS 0.4%

Medium (5.3) in modernasistemas modernanet. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SG_AlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-352, CWE-862
Published: 2025-02-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

modernasistemas:modernanet

References

https://github.com/yago3008/cves
https://vuldb.com/?ctiid.296693
https://vuldb.com/?id.296693
https://vuldb.com/?submit.500574

Check your stack JSON