Medium severity4.7NVD Advisory· Published Sep 14, 2025· Updated Jun 17, 2026
CVE-2025-10395
CVE-2025-10395
Description
A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.
Affected products
3- Range: = 2025.1000.4050
- Range: 2025.1000.4050
Patches
Vulnerability mechanics
References
4- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/August829/Yu/blob/main/58ead8e7e08bfb017.mdnvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.