PT-2025-7806 · Benner · Benner Modernanet

Y4G0 + 1 · Published 2025-02-25 · Updated 2025-02-25 · CVE-2025-1643

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Benner ModernaNet versions up to 1.1.0

Description A vulnerability was found in the processing of the file /DadosPessoais/SG AlterarSenha, leading to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1.1 is able to address this issue.

Recommendations For Benner ModernaNet versions up to 1.1.0, upgrade to version 1.1.1 to address the issue. As a temporary workaround, consider restricting access to the /DadosPessoais/SG AlterarSenha file until the upgrade is applied.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-1643

Affected Products

Benner Modernanet

References · 9

• 🔥 https://github.com/yago3008/cves · Exploit
• 🔥 https://vuldb.com/?submit.500574 · Exploit
• https://osv.dev/vulnerability/CVE-2025-1643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1643 · Security Note
• https://vuldb.com/?id.296693 · Note
• https://t.me/cvenotify/112364 · Telegram Post
• https://twitter.com/CVEnew/status/1894211615320674788 · Twitter Post
• https://t.me/cvedetector/18852 · Telegram Post
• https://vuldb.com/?ctiid.296693 · Note