CVE-2025-15373: EyouCMS function.php saveRemote server-side request forgery
A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15373?
CVE-2025-15373 is classified as a critical vulnerability due to its potential for server-side request forgery.
How do I fix CVE-2025-15373?
To mitigate CVE-2025-15373, upgrade EyouCMS to version 1.7.8 or later where the vulnerability has been patched.
What impact does CVE-2025-15373 have on affected systems?
CVE-2025-15373 allows attackers to exploit the saveRemote function, leading to unauthorized server-side requests.
Can CVE-2025-15373 be exploited remotely?
Yes, CVE-2025-15373 can be exploited remotely, making it particularly dangerous for exposed systems.
What versions of EyouCMS are affected by CVE-2025-15373?
CVE-2025-15373 affects EyouCMS versions up to and including 1.7.7.