Cross-Site Request Forgery Vulnerability in Pix Software Vivaz by Pix Software

CVE-2025-1358

What is CVE-2025-1358?

A vulnerability in Pix Software Vivaz version 6.0.10 allows for cross-site request forgery (CSRF) attacks, where an attacker can manipulate requests sent from a user's browser to perform unintended actions. This flaw can be exploited remotely, posing significant risks to users if not addressed. Despite early disclosure to the vendor, there was no response, leaving systems vulnerable to potential exploitation. Users of this software should assess their security posture and implement necessary protective measures.

References