CVE-2025-24504CWE-20

An improper input validation the CSRF filter results in unsanitized user input written to the application logs

Medium · published January 30, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

An improper input validation the CSRF filter results in unsanitized user input written to the application logs.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-01-30T18:31Z
EPSS history
Timeline
  • 30 JAN 18:31Z
    An improper input validation the CSRF filter results in unsanitized user input written to the application logs
    cvelistv5