CVE-2025-52841CWE-352

Laundry 2.3.0 - Account Takeover via CSRF

High · published July 2, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-07-02T16:45Z
EPSS history
Timeline
  • 02 JUL 16:45Z
    Laundry 2.3.0 - Account Takeover via CSRF
    cvelistv5