Blind Server-Side Request Forgery Vulnerability in InstantCMS by InstantSoft

CVE-2025-59055

What is CVE-2025-59055?

A vulnerable point exists in InstantCMS up to version 2.17.3, where a blind Server-Side Request Forgery (SSRF) flaw allows authenticated attackers to manipulate HTTP/HTTPS requests. Through this vulnerability, attackers can target any external site or service within the network, potentially leading to local network scanning, denial-of-service attacks, and exposure of the server's real IP address if concealed behind a reverse proxy. The lack of available patches amplifies the risk, allowing attackers to overload server resources by sending numerous requests, thereby jeopardizing overall system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References