PT-2025-23437 · Unknown · Mist Community Edition

Alex Perrakis + 3 · Publicado 2025-06-01 · Atualizado 2025-11-25 · CVE-2025-5410

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mist Community Edition versions up to 4.7.1

Description A vulnerability was found in the function session start response of the file src/mist/api/auth/middleware.py. This issue leads to cross-site request forgery and can be initiated remotely.

Recommendations For Mist Community Edition versions up to 4.7.1, upgrade to version 4.7.2 to address this issue.

Exploit

Correção

Missing Authorization

CSRF

Enumeração de Fraquezas

CWE-862

CWE-352

Identificadores relacionados

CVE-2025-5410

Produtos afetados

Mist Community Edition

Referências · 14

• 🔥 https://github.com/Stolichnayer/mist-ce-csrf · Exploit
• https://github.com/mistio/mist-ce/releases/tag/v4.7.2 · Correção
• https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad · Correção
• https://t.me/cvenotify/124280 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-5410 · Nota de Segurança
• https://clamvn.com/cve/CVE-2025-5410 · Publicação no Reddit
• https://vuldb.com/?id.310750 · Nota
• https://t.me/cvetracker/25112 · Publicação no Telegram
• https://t.me/cveNotify/143932 · Publicação no Telegram
• https://vuldb.com/?submit.583532 · Nota
• https://vuldb.com/?ctiid.310750 · Nota
• https://twitter.com/VulmonFeeds/status/1929350844723392880 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1929309774799081924 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-5410 · Aviso do Fabricante