CVE-2019-25447

CVE-2019-25447 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in OrientDB 3.0.17 GA Community Edition. Attackers can exploit these flaws, often in conjunction with reflected and stored Cross-Site Scripting (XSS), to perform unauthorized actions such as creating/deleting databases, modifying schemas, or managing users, due to a lack of token validation on authenticated requests. While the CVSS score is 4.3 (MEDIUM), indicating low impact on integrity and no impact on confidentiality or availability, the FAUCET Risk Score is 73/100. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.