{"id":7249,"date":"2025-06-25T21:35:57","date_gmt":"2025-06-25T21:35:57","guid":{"rendered":"http:\/\/localhost\/?p=7249"},"modified":"2025-06-25T21:35:57","modified_gmt":"2025-06-25T21:35:57","slug":"codeastro-patient-record-management-system-cross-site-request-forgery","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=7249","title":{"rendered":"CodeAstro Patient Record Management System cross-site request forgery"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nCodeAstro Patient Record Management System cross-site request forgery<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-06-25T20:31:06.261Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
Product<\/th>\nPatient Record Management System<\/td>\n<\/tr>\n
Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:N\/UI:P\/VC:N\/VI:L\/VA:N\/SC:N\/SI:N\/SA:N\/E:P<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA medium-severity cross-site request forgery (CSRF) vulnerability was discovered in CodeAstro Patient Record Management System version 1.0. This vulnerability allows remote attackers to perform unauthorized actions on behalf of authenticated users without their knowledge. CSRF attacks can lead to data modification or unauthorized access, posing a significant risk, especially in healthcare systems where patient data is sensitive.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
Vendor<\/th>\nCodeAstro<\/td>\n<\/tr>\n
Product<\/th>\nPatient Record Management System<\/td>\n<\/tr>\n
Affected Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n