Cross-Site Request Forgery Vulnerability in Flexense Products

CVE-2025-59892

What is CVE-2025-59892?

A Cross-Site Request Forgery (CSRF) vulnerability in Sync Breeze Enterprise Server and Disk Pulse Enterprise allows authenticated users to exploit the lack of proper CSRF token implementation. This failure permits an attacker to trick another authorized user into executing unwanted actions within the application. Specifically, an attacker can initiate a POST request to delete commands individually by exploiting the '/delete_command?sid=' endpoint and manipulating the 'cid' parameter. Users of the affected versions should prioritize securing their applications against this type of attack.

References