CVE-2025-41254 · Brief

CVEs like CVE-2025-41254

The records whose text reads closest to CVE-2025-41254, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2015-52580.722
   Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.

   Same weakness class, CWE-352 (cross-site request forgery).

2. CVE-2018-12700.791
   Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2018-12570.762
   Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2022-229710.809
   In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

5. CVE-2017-126310.710
   Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications.

   Same weakness class, CWE-352 (cross-site request forgery).

6. CVE-2018-12750.794
   Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

7. CVE-2014-78090.657
   Apache Struts 2.0.0 through 2.3.x before 2.3.20 uses predictable <s:token/> values, which allows remote attackers to…

   Same weakness class, CWE-352 (cross-site request forgery).

8. CVE-2016-44300.657
   Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct…

   Same weakness class, CWE-352 (cross-site request forgery).

9. CVE-2013-64290.699
   The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not…

   Same weakness class, CWE-352 (cross-site request forgery).

10. CVE-2017-78770.652
    CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.

    Same weakness class, CWE-352 (cross-site request forgery).

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 395,466 records. Fetched 2026-10-30.