CVE-2025-24504

An improper input validation the CSRF filter results in unsanitized user input written to the application logs.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - secure@symantec.com

Published

2025-01-30

Last modified

2025-02-05

Weaknesses

CWE-20

Affected products

• Symantec Privileged Access Management (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362