CVE-2025-31617

Summary

CVE-2025-31617 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the PostmarkApp Email Integrator. This issue allows malicious actors to submit unintended commands to the application on behalf of a victim who has previously authenticated and maintained a valid session. The vulnerability exists in versions of the PostmarkApp Email Integrator from n/a through 2.4, putting these users at risk of data manipulation or unauthorized actions. Successful exploitation could lead to security breaches and potential data theft. Users are advised to upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.