CVE-2025-66906

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2025-12-19

Last modified

2026-10-05

Weaknesses

CWE-352

Affected products

• Turms (Turms-im)

References

• https://github.com/turms-im/turms
• https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.md