CVE-2025-10395

Katalog CVE

CVSS 7.2 · High EPSS 0,35%

Kerentanan Server-Side Request Forgery (SSRF) pada maccms. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.

Rincian

Terbit di NVD

14 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.323830 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.645798 advisory pihak ketiga · vdb entry
• https://github.com/August829/Yu/blob/main/58ead8e7e08bfb017.md broken link
• https://vuldb.com/?ctiid.323830 permissions required · vdb entry