High severity8.2OSV Advisory· Published Jul 11, 2025· Updated Apr 15, 2026
CVE-2025-53641
CVE-2025-53641
Description
Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery (SSRF) condition, which can be exploited to initiate unauthorized outbound requests from the server hosting the Postiz application. This vulnerability is fixed in 1.62.3.
Affected products
1- Range: v1.45.1, v1.47.0, v1.48.1, …
Patches
2092f4be7ad4b65eca0e2f221Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2News mentions
0No linked articles in our index yet.