CVE-2025-6664

CVE-2025-6664 describes a problematic Cross-Site Request Forgery (CSRF) vulnerability in CodeAstro Patient Record Management System version 1.0. This flaw allows a remote attacker to manipulate an unknown function, potentially leading to unauthorized actions if a legitimate user is tricked into clicking a malicious link. The vulnerability has a CVSS score of 4.3 (Medium) due to its network attack vector and low attack complexity, though it requires user interaction and has a low impact on integrity with no confidentiality or availability impact. While the exploit has been publicly disclosed, there is no evidence of active exploitation, and no readily available exploit modules like Metasploit or Nuclei, nor significant community discussion or media coverage.