Server-Side Request Forgery in maccms10 by Maccms
CVE-2025-28090

9.1CRITICAL

Key Information:

Vendor

Maccms

Status
maccms10
Vendor
CVE Published:
28 March 2025

What is CVE-2025-28090?

The maccms10 platform, specifically version v2025.1000.4047, is susceptible to a Server-Side Request Forgery (SSRF) vulnerability found in its Collection Custom Interface. This flaw allows an attacker to manipulate server requests to access internal resources, potentially exposing sensitive information or leading to further exploitation.

References

https://www.yuque.com/morysummer/vx41bz/xo5w1euakvtgenex

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.