CVE-2025-25785: SSRF
Published Feb 26, 2025
·Updated
JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request.
Affected Software
2 affected components
Jizhicms JIZHICMS
Jizhicms JIZHICMS=2.5.4
Event History
Feb 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-25785?
CVE-2025-25785 is considered a critical vulnerability due to its potential for Server-Side Request Forgery (SSRF) attacks.
2
How do I fix CVE-2025-25785?
To fix CVE-2025-25785, update JizhiCMS to the latest version that addresses this vulnerability.
3
What version of JizhiCMS is affected by CVE-2025-25785?
JizhiCMS v2.5.4 is the affected version associated with CVE-2025-25785.
4
What can attackers do with CVE-2025-25785?
Attackers can use CVE-2025-25785 to perform intranet scans by leveraging SSRF exploitation.
5
Is there a patch for CVE-2025-25785?
Yes, a patch for CVE-2025-25785 has been released in the latest version of JizhiCMS.