CVE-2025-22963

Impact

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://blog.teedy.io/
• https://github.com/samplev45/CVE-2025-22963
• https://github.com/sismics/docs/releases/tag/v1.11
• https://github.com/sota70/teedy-v1.11-csrf