CVE-2020-25562

MEDIUM 6.5CVE-2020-25562 · Published 11/08/2021 · updated 17/06/2026

In short

CVE-2020-25562 is a MEDIUM (CVSS 6.5) vulnerability affecting sapphireims (sapphireims).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sapphireims sapphireims	`= 5.0`	No fix yet

Description

In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.

References

vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf · Exploit
vuln.shellcoder.party/tags/sapphireims · Third Party Advisory

More vulnerabilities in sapphireims

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sapphireims

= 5.0

No fix yet

More vulnerabilities in sapphireims

See all →