CVE-2025-6664

A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-352
• CWE-862
• CWE-352

• https://codeastro.com/Product
• https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF.mdExploit, Third Party Advisory
• https://github.com/Vanshdhawan188/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF/blob/main/CodeAstro-Online-Healthcare-Patient-Record-Management-System-CSRF.md#-steps-to-reproduceExploit, Third Party Advisory
• https://vuldb.com/?ctiid.313878Permissions Required, VDB Entry
• https://vuldb.com/?id.313878Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.602323Third Party Advisory, VDB Entry

Published

Jun 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66629HedgeDoc is an open source, real-time, collaborative, markdo…4.3
• CVE-2025-6663GStreamer H266 Codec Parsing Stack-based Buffer Overflow Rem…7.8
• CVE-2025-66630Fiber is an Express inspired web framework written in Go. Be…9.4
• CVE-2025-66631CSLA .NET is a framework designed for the development of reu…9.8
• CVE-2025-66633An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-66635Stack-based buffer overflow vulnerability exists in SEIKO EP…8.6
• CVE-2025-66644Array Networks ArrayOS AG before 9.4.5.9 allows command inje…9.8
• CVE-2025-66645NiceGUI is a Python-based UI framework. Versions 3.3.1 and b…7.5
• CVE-2025-66646RIOT is an open-source microcontroller operating system, des…7.5
• CVE-2025-66647RIOT is an open-source microcontroller operating system, des…9.8
• CVE-2025-66648vega-functions provides function implementations for the Veg…6.1
• CVE-2025-66649Rejected reason: Further research determined the issue is no…