CVE-2025-1927CWE-352

CSRF in Restajet's Online Food Delivery System

High · published December 19, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

⚡ A sneaky CSRF vulnerability is lurking in the Online Food Delivery System! This means an attacker can submit fake food orders on behalf of unsuspecting users! 🍕💔 Think of it like a waiter accepting a fake order slip left by someone else. Without checking who actually placed the order, they serve up a delicious meal that the customer never wanted! If exploited, an attacker can hijack requests and place unauthorized orders, leading to frustrating surprises for users and potential financial losses for businesses. Imagine your account getting charged for a feast you didn’t even order—absolutely devastating!

Put simply

Think of it like a waiter accepting a fake order slip left by someone else. Without checking who actually placed the order, they serve up a delicious meal that the customer never wanted! This CSRF vulnerability allows attackers to trick users into submitting requests they didn’t intend, as the system doesn’t verify the authenticity of the request origins. It's like a restaurant serving food without confirming the customer’s identity first.

What to do

If exploited, an attacker can hijack requests and place unauthorized orders, leading to frustrating surprises for users and potential financial losses for businesses. Imagine your account getting charged for a feast you didn’t even order—absolutely devastating! To secure your system, implement anti-CSRF tokens on all state-changing requests and ensure that your application validates request origins. Regularly update the system and monitor for any suspicious activity. Don’t wait—act now! You've got this! With these steps, you'll have your online food delivery system secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-12-19T12:01Z
EPSS history
Timeline
  • 19 DEC 12:01Z
    CSRF in Restajet's Online Food Delivery System
    cvelistv5