CVE-2025-62687
MEDIUMSecuavail Logstare Collector < 2.4.2 - CSRF
Title source: ruleDescription
Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.
Scores
CVSS v3
6.5
EPSS
0.0002
EPSS Percentile
5.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Classification
CWE
CWE-352
Status
published
Affected Products (1)
secuavail/logstare_collector
< 2.4.2
Timeline
Published
Nov 21, 2025
Tracked Since
Feb 18, 2026