Tianti vulnerabilities

2 known vulnerabilities in Tianti from Tianti Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Tianti: Cross-Site Request Forgery

  CVE-2025-27910Mar 10, 2025Tianti Project

  tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.

• 8.8 High severity

  Tianti: Cross-Site Request Forgery

  CVE-2025-25907Mar 10, 2025Tianti Project

  tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request.