Approved changes feed: RSS · Atom

cpe:2.3:a:iroha_soft_co.,_ltd.:iroha_board:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIroha Soft Co., Ltd. (b6adaa4c-c32e-549f-8534-3578749214b4)
ProductIroha Board (cf5f0578-6df8-514d-b63d-4cc806e90953)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48497 vulnerable 2026-06-08 07:27:16.001511 Details available
MEDIUM (4.3)
Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL while being logged in to the affected product, arbitrary learning histories may be registered.
Published: 2025-06-26T06:04:41.333Z
Updated: 2025-06-26T13:33:32.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41404 vulnerable 2026-06-08 07:25:06.994598 Details available
MEDIUM (4.3)
Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.
Published: 2025-06-26T06:04:32.064Z
Updated: 2025-06-26T13:19:09.569Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.