CVE-2025-31756

Summary

CVE-2025-31756 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the TZ PlusGallery from version n/a through 1.5.5. An attacker can exploit this issue by tricking a user into making unintended actions on the affected website. The CSRF attack is carried out by the attacker, who creates a malicious request that is transmitted from the victim's browser to the vulnerable application, bypassing the user's consent. This can lead to unauthorized modification of data or even complete system takeover. Users are strongly advised to update their TZ PlusGallery installation to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.