CVE-2025-4375

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affects Pro Cloud Server: earlier than 6.0.165.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - db4dfee8-a97e-4877-bfae-eba6d14a2166

Published

2025-05-09

Last modified

2025-05-09

Weaknesses

CWE-352

Affected products

• Pro Cloud Server (Sparx Systems)

References

• https://sparxsystems.com/products/procloudserver/6.1/