medium6.5
CVE-2025-54598
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/…
Impact
The Bevy Event service through 2025-07-22, as used for eBay Seller Events and other activities, allows CSRF to delete all notifications via the /notifications/delete/ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bevy | Bevy | through 2025-06-24 |