CVE-2025-28089

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2025-03-28

Last modified

2025-03-31

Weaknesses

CWE-918

Affected products

• Maccms (Maccms)

References

• https://github.com/magicblack/maccms10/releases/tag/v2025.1000.4047
• https://www.yuque.com/morysummer/vx41bz/wzer7qxh0vwrf6zq