MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Anike-x/CVE-2025-45250 | Exploit Third Party Advisory |
| https://github.com/zmister2016/MrDoc | Product |
Configurations
History
27 Jun 2025, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mrdoc:mrdoc:*:*:*:*:*:*:*:* | |
| First Time |
Mrdoc
Mrdoc mrdoc |
|
| References | () https://github.com/Anike-x/CVE-2025-45250 - Exploit, Third Party Advisory | |
| References | () https://github.com/zmister2016/MrDoc - Product |
06 May 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-06 17:16
Updated : 2025-06-27 15:33
NVD link : CVE-2025-45250
Mitre link : CVE-2025-45250
JSON object : View
Products Affected
mrdoc
- mrdoc
CWE
No CWE.
