Which versions of Traffic Offense Reporting System are affected by CVE-2025-5732?

CVE-2025-5732 presents moderate security risk, a cross-site request forgery vulnerability rated CVSS 4.3. Users could be tricked into performing unintended actions.

Is there a public PoC exploit available for CVE-2025-5732?

Yes, a public proof-of-concept exploit is available for CVE-2025-5732. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-5732?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Verify anti-CSRF tokens are enforced.

Traffic Offense Reporting System CVE-2025-5732

Q: What is the CVSS score of CVE-2025-5732?

CVE-2025-5732 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2025-17097 LOW

Cross-Site Request Forgery (CSRF) (CWE-352)

2025-06-06 cna@vuldb.com

CSRF Traffic Offense Reporting System Carmelo

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.3 MEDIUM

Requires user interaction (UI:R), low integrity impact (I:L), no confidentiality or availability impact.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17097

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

PoC Detected

Nov 13, 2025 - 15:51 vuln.today

Public exploit code

CVE Published

Jun 06, 2025 - 08:15 cve.org

LOW 2.1

CVE Published

Jun 06, 2025 - 08:15 nvd

MEDIUM 4.3

DescriptionCVE.org

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Cross-site request forgery in code-projects Traffic Offense Reporting System 1.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. Publicly available exploit code exists, but no active exploitation has been confirmed. The low EPSS score (0.06%) suggests limited real-world risk.

Technical ContextAI

The vulnerability is a Cross-Site Request Forgery (CSRF) (CWE-352) in the Traffic Offense Reporting System, a PHP-based web application. CSRF attacks exploit the trust a web application has in an authenticated user's browser, allowing an attacker to forge requests that execute unintended actions. The affected product is identified by CPE cpe:2.3:a:carmelo:traffic_offense_reporting_system:1.0:*:*:*:*:*:*:*.

RemediationAI

No official patch is available from the vendor. As a workaround, implement CSRF tokens in all state-changing requests, validate the Origin or Referer header, and enforce same-site cookie attributes. Note that these mitigations require code-level changes and may not be feasible without vendor support.