Cross-Site Request Forgery Vulnerability in Sync Breeze and Disk Pulse by Flexense

CVE-2025-59894

What is CVE-2025-59894?

A cross-site request forgery vulnerability exists in Sync Breeze Enterprise Server and Disk Pulse Enterprise, allowing an authenticated user to manipulate other users' sessions. This occurs due to an inadequate implementation of CSRF tokens, enabling malicious actions such as executing a POST request to delete all commands using a specific endpoint. Organizations utilizing these products should assess their exposure and implement appropriate mitigations to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References