CVE-2025-7379

published 2025-07-09

CVE-2025-7379: A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the…

Priority P4 25 medium 5.2 CVSS 4.0

AV N AC H AT P PR H UI P VC L VI L VA L SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from 1.2.0 before 1.2.0.r206.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asustor	adm	>= 1.1.0 < 1.1.0.r207	1.1.0.r207
asustor	adm	>= 1.2.0 < 1.2.0.r206	1.2.0.r206

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-352