CVE-2025-65573

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Dec 9, 2025

CISA due date

—

The record

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_status.

Affected packages

Ecosystem	Package	Introduced	Fixed