Cross-Site Request Forgery Vulnerability in Flexense Products

CVE-2025-59891

What is CVE-2025-59891?

A Cross-Site Request Forgery (CSRF) vulnerability exists in both Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. This security flaw allows an authenticated user to trick another user into executing unintended actions within the application session by leveraging improper handling of CSRF tokens. An attacker can exploit this vulnerability through a crafted POST request, potentially leading to unauthorized password changes or user account creations, thereby compromising user credentials and application integrity.

References