Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-10395

Magicblack MacCMS Scheduled Task col_url server-side request forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Magicblack MacCMS

  • 2025.1000.4050affected

References