medium4.7
CVE-2025-10397
A vulnerability was identified in Magicblack MacCMS 2025.1000.4050.
Impact
A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maccms | Maccms | Version 10.0 |