CVE-2025-7379

DataSync Center <1.1.0.r207-1.2.0.r206 - Auth Bypass

Title source: llm

Description

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from 1.2.0 before 1.2.0.r206.

Scores

EPSS 0.0002
EPSS Percentile 5.3%

Classification

CWE
CWE-352
Status draft

Timeline

Published Jul 09, 2025
Tracked Since Feb 18, 2026