CVE-2025-53897 — Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability

CVE-2025-53897

Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability PUBLISHED

Description (CNA)

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.

Affected (CNA)

Vendor / product	Versions
kiteworks / security-advisories	affected < 9.1.0

CWE

CWE-352

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cxwc-7899-3h4m

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.