CVE-2025-48497 — iroha Soft Co., Ltd. / iroha Board

CVE-2025-48497

iroha Soft Co., Ltd. / iroha Board PUBLISHED

Description (CNA)

Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL while being logged in to the affected product, arbitrary learning histories may be registered.

Affected (CNA)

Vendor / product	Versions
iroha Soft Co., Ltd. / iroha Board	affected versions v0.10.12 and earlier

CWE

CWE-352

References

https://irohaboard.irohasoft.jp/security/
https://jvn.jp/en/jp/JVN92520966/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.