5.3
Moyenne
CVE-2025-10471 A vulnerability was detected in ZKEACMS 4.3
Description
A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ZKEACMS | 4.3 | Pas de correctif indiqué |
Références
- VDB-323890 | ZKEACMS MediaController.cs Proxy server-side request forgery vuldb.com
- VDB-323890 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #648387 | SeriaWei ZKEACMS v4.3 Non-blind SSRF vuldb.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification