CVE-2020-25562

medium

Description

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.

References

https://vuln.shellcoder.party/tags/sapphireims/

https://vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf/

Details

Source: Mitre, NVD

Published: 2021-08-11

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N