samplev45/cve-2025-22963Detailed disclosure of CVE-2025-22963, a CSRF vulnerability in Teedy <= v1.11 enabling account takeover via forced user information changes.
| CVE ID | CVE-2025-22963 |
|---|
| CWE ID | CWE-352 |
| CWE Name | Cross-Site Request Forgery(CSRF) |
| CVSS Version 3.x | 7.5 High |
| Affected Software | Teedy <= v1.11 |
Due to the lack of CSRF protection, it is possible to trick an authenticated user into performing an unwanted action such as changing user information.
Tricking an authenticated user into making a request to one of the endpoints can change user profile(including password) leading to account takeover.
To fix this vulnerability, implement CSRF token for endpoints.
CSRF token makes it difficult for an attacker to construct a valid request.
It must be unpredictable and secret.
sismics - Teedy(https://github.com/sismics/docs)
portswigger - Cross-site request forgery(CSRF)(https://portswigger.net/web-security/csrf)
Mozilla - Examples of access control scenarios(https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#examples_of_access_control_scenarios)
Thank you, Ayato for teaching me how to report a vulnerability.
