CVE-2025-4375

Sparx Systems Pro Cloud Server <6.0.165 - CSRF

Title source: llm

Description

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Request Forgery is present at the whole application but it can be used to change the Pro Cloud Server Configuration password. This issue affects Pro Cloud Server: earlier than 6.0.165.

References (1)

[Various Sources] https://sparxsystems.com/products/procloudserver/6.1/

Scores

EPSS 0.0020

EPSS Percentile 42.1%

Classification

CWE

CWE-352

Status draft

Timeline

Published May 09, 2025

Tracked Since Feb 18, 2026