medium6.1
CVE-2025-66906
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
Impact
Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Turms-Im | Turms | Version 0.10.0-snapshot |