PT-2025-23437 · Unknown · Mist Community Edition

Alex Perrakis + 3 · CVE-2025-5410 · Publicado 2025-06-01 · Atualizado 2025-11-25

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Mist Community Edition versions up to 4.7.1

Description A vulnerability was found in the function session start response of the file src/mist/api/auth/middleware.py. This issue leads to cross-site request forgery and can be initiated remotely.

Recommendations For Mist Community Edition versions up to 4.7.1, upgrade to version 4.7.2 to address this issue.

Exploit

Correção

CSRF

Missing Authorization

Enumeração de Fraquezas

CWE-352

CWE-862

Identificadores relacionados

CVE-2025-5410

Produtos afetados

Mist Community Edition

Referências · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5410.json · Exploit
• 🔥 https://github.com/Stolichnayer/mist-ce-csrf · Exploit
• https://github.com/mistio/mist-ce/releases/tag/v4.7.2 · Correção
• https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad · Correção
• https://twitter.com/CVEnew/status/1929309774799081924 · Publicação no Twitter
• https://t.me/cveNotify/143932 · Publicação no Telegram
• https://t.me/cvenotify/124280 · Publicação no Telegram
• https://t.me/cvetracker/25112 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-5410 · Nota de Segurança
• https://vuldb.com/?id.310750 · Nota
• https://osv.dev/vulnerability/CVE-2025-5410 · Aviso do Fabricante
• https://vuldb.com/?ctiid.310750 · Nota
• https://twitter.com/VulmonFeeds/status/1929350844723392880 · Publicação no Twitter
• https://vuldb.com/?submit.583532 · Nota
• https://clamvn.com/cve/CVE-2025-5410 · Publicação no Reddit