CVE-2025-62687CWE-352csrf

CVE-2025-62687

Medium · published November 21, 2025

CVSS v3.0

6.5

EPSS

Percentile

4.3

In the wild

Unconfirmed

What it is

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.

The record

Technical detail

CVSS v3.0: 6.5 · MEDIUM
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00155 · 4.3th percentile
Weakness: CWE-352 · Cross-Site Request Forgery (CSRF)
Published: 2025-11-21T12:15Z

Affected products (1)

Product	Versions	Fixed in
secuavail/logstare_collector	< 2.4.2	2.4.2

References (2)

https://jvn.jp/en/jp/JVN77560819/ · [email protected]https://www.logstare.com/vulnerability/2025-001/ · [email protected]

EPSS history

Timeline

21 NOV 06:17Z
Cross-site request forgery vulnerability exists in LogStare Collector
cvelistv5