CVE-2025-66906

Description

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/turms-im/turms ↗
• https://github.com/Xzzz111/public_cve_report/blob/main/CVE-2025-66906_report.md ↗