5.9Orta
CVE-2025-13671Cross Site request forgery vulnerability discovered in OpenText WSM Management Server.
Açıklama
Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could make a user, with active session inside the product, click on a page that contains this malicious HTML triggering to perform changes unconsciously. This issue affects Web Site Management Server: 16.7.0, 16.7.1.
Zayıflık türü (CWE):
CWE-352
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| opentext | web site management server | 16.7.0 | |
| OpenText™ | Web Site Management Server | 16.7.0, 16.7.1 |
Kaynaklar ve yamalar
- https://support.opentext.com/csm/en?id=ot_kb_unauthenticated&sysparm_article=KB0854846 Vendor Advisory
- https://github.com/MarioTesoro/vulnerability-research/blob/main/CVE-2025-13671/README.md ExploitThird Party Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:opentext:web_site_management_server:16.7.0:*:*:*:*:*:*:*cpe:2.3:a:opentext:web_site_management_server:16.7.1:*:*:*:*:*:*:*