CyberSecBulletin

Tianti Project vulnerabilities

We track 2 vulnerabilities in Tianti Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2025.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Tianti Project vulnerabilities

  • 8.0 High severity

    Tianti: Cross-Site Request Forgery

    CVE-2025-27910Tianti Project

    tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

  • 8.8 High severity

    Tianti: Cross-Site Request Forgery

    CVE-2025-25907Tianti Project

    tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.