CVE-2025-29722

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users

Medium · published April 17, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users. The issue exists due to missing CSRF protection on sensitive endpoints.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Published
2025-04-17T00:00Z
EPSS history
Timeline
  • 17 APR 00:00Z
    A CSRF vulnerability in Commercify v1.0 allows remote attackers to perform unauthorized actions on behalf of authenticated users
    cvelistv5