Security Advisory

CVE-2025-63952

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-24 00:00:00

Last updated 2025-11-24 19:04:38

Assigner mitre

State PUBLISHED

Description

A Cross-Site Request Forgery (CSRF) in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 allows attackers to arbitrarily create accounts via a crafted GET request.

← Browse all CVEs View on cve.org ↗