EUVD-2026-261647

fkie_cve-2025-62687

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.

GHSA-4mr3-hh84-8hpp

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.

jvndb-2025-000106

LogStare Collector provided by LogStare Inc. contains multiple vulnerabilities listed below.<ul><li>Incorrect default permissions for the installation directory (CWE-276) - CVE-2025-58097</li><li>Stored cross-site scripting vulnerability in UserManagement (CWE-79) - CVE-2025-61949</li><li>Incorrect authorization in UserRegistration (CWE-863) - CVE-2025-62189</li><li>Cross-site request forgery (CWE-352) - CVE-2025-62687</li><li>Insertion of sensitive information into sent data (CWE-201) - CVE-2025-64299</li><li>Uncontrolled search path element (CWE-427) - CVE-2025-64695</li></ul> Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Most recent entries from all

EUVD-2026-261647

fkie_cve-2025-62687

GHSA-4mr3-hh84-8hpp

jvndb-2025-000106