CVE-2025-55040

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-55040", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-03-18T20:24:57.832Z", "dateReserved": "2025-08-06T00:00:00.000Z", "datePublished": "2026-03-18T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-18T15:41:00.865Z"}, "descriptions": [{"lang": "en", "value": "The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge file upload requests that install attacker-controlled forms when an authenticated administrator visits a crafted webpage. Full exploitation of this vulnerability would require the victim to select a malicious ZIP file containing form definitions, which can be automatically generated by the exploit page and used to create data collection forms that steal sensitive information. Successful exploitation of the import form CSRF vulnerability could result in the installation of malicious data collection forms on the target MuraCMS website that can steal sensitive user information. When an authenticated administrator visits a malicious webpage containing the CSRF exploit and selects the attacker-generated ZIP file, their browser uploads and installs form definitions that create legitimate forms that could be designed with malicious content."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.murasoftware.com"}, {"url": "https://docs.murasoftware.com/v10/release-notes/#section-version-1014"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-352", "lang": "en", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-18T20:21:05.439425Z", "id": "CVE-2025-55040", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-18T20:24:57.832Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-55040", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-18T20:21:05.439425Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-18T20:22:36.516Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.murasoftware.com"}, {"url": "https://docs.murasoftware.com/v10/release-notes/#section-version-1014"}], "descriptions": [{"lang": "en", "value": "The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge file upload requests that install attacker-controlled forms when an authenticated administrator visits a crafted webpage. Full exploitation of this vulnerability would require the victim to select a malicious ZIP file containing form definitions, which can be automatically generated by the exploit page and used to create data collection forms that steal sensitive information. Successful exploitation of the import form CSRF vulnerability could result in the installation of malicious data collection forms on the target MuraCMS website that can steal sensitive user information. When an authenticated administrator visits a malicious webpage containing the CSRF exploit and selects the attacker-generated ZIP file, their browser uploads and installs form definitions that create legitimate forms that could be designed with malicious content."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-18T15:41:00.865Z"}}}, "cveMetadata": {"cveId": "CVE-2025-55040", "state": "PUBLISHED", "dateUpdated": "2026-03-18T20:24:57.832Z", "dateReserved": "2025-08-06T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-18T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:murasoftware:mura_cms:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB4646EE-1255-4B42-890A-E0B57EBFE2CE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge file upload requests that install attacker-controlled forms when an authenticated administrator visits a crafted webpage. Full exploitation of this vulnerability would require the victim to select a malicious ZIP file containing form definitions, which can be automatically generated by the exploit page and used to create data collection forms that steal sensitive information. Successful exploitation of the import form CSRF vulnerability could result in the installation of malicious data collection forms on the target MuraCMS website that can steal sensitive user information. When an authenticated administrator visits a malicious webpage containing the CSRF exploit and selects the attacker-generated ZIP file, their browser uploads and installs form definitions that create legitimate forms that could be designed with malicious content."}, {"lang": "es", "value": "La vulnerabilidad CSRF en el formulario de importaci\u00f3n en MuraCMS hasta la versi\u00f3n 10.1.10 permite a los atacantes cargar e instalar definiciones de formularios maliciosas a trav\u00e9s de un ataque CSRF. La funci\u00f3n vulnerable cForm.importform carece de validaci\u00f3n de token CSRF, lo que permite a sitios web maliciosos falsificar solicitudes de carga de archivos que instalan formularios controlados por el atacante cuando un administrador autenticado visita una p\u00e1gina web manipulada. La explotaci\u00f3n completa de esta vulnerabilidad requerir\u00eda que la v\u00edctima seleccione un archivo ZIP malicioso que contenga definiciones de formularios, el cual puede ser generado autom\u00e1ticamente por la p\u00e1gina del exploit y utilizado para crear formularios de recopilaci\u00f3n de datos que roban informaci\u00f3n sensible. La explotaci\u00f3n exitosa de la vulnerabilidad CSRF en el formulario de importaci\u00f3n podr\u00eda resultar en la instalaci\u00f3n de formularios de recopilaci\u00f3n de datos maliciosos en el sitio web MuraCMS objetivo que pueden robar informaci\u00f3n sensible del usuario. Cuando un administrador autenticado visita una p\u00e1gina web maliciosa que contiene el exploit CSRF y selecciona el archivo ZIP generado por el atacante, su navegador carga e instala definiciones de formularios que crean formularios leg\u00edtimos que podr\u00edan ser dise\u00f1ados con contenido malicioso."}], "id": "CVE-2025-55040", "lastModified": "2026-06-17T09:41:09.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-55040", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-18T20:21:05.439425Z", "version": "2.0.3"}}]}, "published": "2026-03-18T16:16:23.170", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://docs.murasoftware.com/v10/release-notes/#section-version-1014"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.murasoftware.com"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,10.1.10]"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 98.0, "source": "matching"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "mura_cms", "vendor": "murasoftware"}], "analysis": {"en": {"generated_at": "2026-03-20T19:27:23.365671+00:00", "value": {"mitigation_remediation": ["Upgrade MuraCMS to version\u202f10.1.14 or later to address the CSRF issue.", "Verify that no unauthorized form definitions exist on the server and remove any that were added without approval.", "Restrict the importform functionality to trusted administrators only and enable CSRF token validation if possible.", "Ensure that administrator accounts use strong, unique passwords and enable two\u2011factor authentication.", "Conduct a review of all administrative traffic to detect potential CSRF activity and block suspicious requests."], "summary": {"action": "Patch Now", "impact": "Unauthorized Form Installation"}, "threat_synthesis": {"affected_systems": "The vulnerability is present in MuraCMS versions up to 10.1.10, as indicated by the CPE string cpe:2.3:a:murasoftware:mura_cms. The vendor\u2019s release notes for version\u202f10.1.14 indicate that the issue was fixed. Only MuraCMS is affected; no other products appear to be impacted according to the available CNA data.", "description_and_impact": "The MuraCMS import form CSRF vulnerability allows an attacker to trick an authenticated administrator into uploading malicious form definitions because the import function does not enforce CSRF validation. A malicious website can forge a file\u2011upload request that, when the admin visits it, installs attacker\u2011controlled forms. These forms can be constructed to gather sensitive user data, effectively turning the CMS into a stealth data\u2011collection platform.", "risk_and_exploitability": "The CVSS score of 8.8 classifies this flaw as high severity, while an EPSS score below 1\u202f% suggests that active exploitation is currently rare. The vulnerability is not listed in CISA\u2019s KEV catalog, so no confirmed active attacks are known. Exploitation requires an attacker to host a crafted webpage and deliver a ZIP file containing form definitions; once the administrator\u2019s browser processes this request, the malicious forms are installed and can harvest sensitive data. Consequently, the risk to organizations with exposed or weakly protected admin sessions is moderate to high."}}}}, "created": "2026-03-19T08:57:12.315557+00:00", "title": "CSRF Upload Exploit Enables Malicious Form Installation in MuraCMS", "updated": "2026-03-24T10:54:13.647444+00:00", "vendors": ["murasoftware", "murasoftware$PRODUCT$mura_cms"]}