Irohasoft develops Iroha Board, a focused web-based collaboration or content-management product, with its observed vulnerability pattern centered on web-tier access and request-handling issues such as cross-site request forgery and forced-browsing weaknesses. Current severity, exploitation, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Irohasoft over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-41404MEDIUM Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker w | Jun 26, 2025 | 4.3 | 15 | NO | NO |
CVE-2025-48497MEDIUM Cross-site request forgery vulnerability exists in iroha Board versions v0.10.12 and earlier. If a user accesses a specially crafted URL while being logged in to the affected produ | Jun 26, 2025 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Irohasoft.
Media articles that mention a CVE ID that affects a product developed by Irohasoft — matched by CVE ID, not by vendor name.