VYPR
← All advisories
High severity8.2OSV Advisory· Published Jul 11, 2025· Updated Apr 15, 2026

CVE-2025-53641

CVE-2025-53641

Description

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery (SSRF) condition, which can be exploited to initiate unauthorized outbound requests from the server hosting the Postiz application. This vulnerability is fixed in 1.62.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gitroom/Postiz AppOSV2 versions
    v1.45.1, v1.47.0, v1.48.1, …+ 1 more
    • (no CPE)range: v1.45.1, v1.47.0, v1.48.1, …
    • (no CPE)range: >=1.45.1, <1.62.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.