5.3
Medium
CVE-2025-10471 A vulnerability was detected in ZKEACMS 4.3
Description
A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ZKEACMS | 4.3 | No fix stated |
References
- VDB-323890 | ZKEACMS MediaController.cs Proxy server-side request forgery vuldb.com
- VDB-323890 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #648387 | SeriaWei ZKEACMS v4.3 Non-blind SSRF vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified