JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://jizhicms.com | Not Applicable |
| https://www.jizhicms.cn/ | Product |
Configurations
History
10 Apr 2025, 17:38
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jizhicms jizhicms
Jizhicms |
|
| References | () https://www.jizhicms.cn/ - Product | |
| References | () http://jizhicms.com - Not Applicable | |
| CPE | cpe:2.3:a:jizhicms:jizhicms:2.5.4:*:*:*:*:*:*:* |
26 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-26 15:15
Updated : 2025-04-10 17:38
NVD link : CVE-2025-25785
Mitre link : CVE-2025-25785
JSON object : View
Products Affected
jizhicms
- jizhicms
CWE
No CWE.