CVE-2025-45250

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.
CVSS

No CVSS.

References
Link Resource
https://github.com/Anike-x/CVE-2025-45250 Exploit Third Party Advisory
https://github.com/zmister2016/MrDoc Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:mrdoc:mrdoc:*:*:*:*:*:*:*:*

History

27 Jun 2025, 15:33

Type Values Removed Values Added
CPE cpe:2.3:a:mrdoc:mrdoc:*:*:*:*:*:*:*:*
First Time Mrdoc
Mrdoc mrdoc
References () https://github.com/Anike-x/CVE-2025-45250 - () https://github.com/Anike-x/CVE-2025-45250 - Exploit, Third Party Advisory
References () https://github.com/zmister2016/MrDoc - () https://github.com/zmister2016/MrDoc - Product

06 May 2025, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-06 17:16

Updated : 2025-06-27 15:33


NVD link : CVE-2025-45250

Mitre link : CVE-2025-45250


JSON object : View

Products Affected

mrdoc

  • mrdoc
CWE

No CWE.