Description (CNA)
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sismics / Teedy | affected 0 through 1.11 |
CWE
CWE-352
References
- https://github.com/sota70/teedy-v1.11-csrf
- https://blog.teedy.io/
- https://github.com/sismics/docs/releases/tag/v1.11
- https://github.com/samplev45/CVE-2025-22963
ADP enrichment
No English description supplied.
No references supplied.