CSRF Vulnerability in Teedy for Account Takeover
CVE-2025-22963

7.5HIGH

Key Information:

Vendor

Sismics

Status
Teedy
Vendor
CVE Published:
13 January 2025

What is CVE-2025-22963?

Teedy version 1.11 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability, which allows attackers to perform unauthorized actions on behalf of an authenticated user. By sending a specially crafted POST request to /api/user/admin, an attacker could potentially take control of user accounts, posing serious security risks to users and data integrity. It is crucial for users of Teedy to implement security measures to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Teedy 0 <= 1.11

References

https://github.com/sota70/teedy-v1.11-csrf
https://blog.teedy.io/
https://github.com/sismics/docs/releases/tag/v1.11

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.