CVE-2025-6478 – CodeAstro Expense Management System cross-site request forgery

https://notcve.org/view.php?id=CVE-2025-6478

22 Jun 2025 — A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. • https://codeastro.com • CWE-352: Cross-Site Request Forgery (CSRF) CWE-862: Missing Authorization •