CVE-2025-12479

CRITICAL

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-12479 has a selected CVSS score of 10.0 (critical).

Description

Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 29, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

BLU-IC2

Browse Azure Access Technology / BLU-IC2

Default status: unaffected

CVE ListThrough 1.19.5affected

BLU-IC4

Browse Azure Access Technology / BLU-IC4

Default status: unaffected

CVE ListThrough 1.19.5affected

References

2