CVE-2025-1644

5.3 mediumEPSS 0.4%

Medium (5.3) in modernasistemas modernanet. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SG_Gravar. The manipulation of the argument idItAg leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 1.2.1 is able to address this issue. It is recommended to upgrade the affected component.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs: CWE-352, CWE-862
Published: 2025-02-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

modernasistemas:modernanet

References

https://github.com/yago3008/cves
https://vuldb.com/?ctiid.296694
https://vuldb.com/?id.296694
https://vuldb.com/?submit.500575

Check your stack JSON