CVE-2025-12479
High · 8.8CVSS
8.8
EPSS
0.2%
Published
Oct 29, 2025
CISA due date
—
The record
Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|