CVE-2025-45250: SSRF
Published May 6, 2025
·Updated
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validateurl function of the appdoc/utils.py file.
Affected Software
2 affected components
mrdoc mrdoc<0.95
mrdoc mrdoc<=0.95
Event History
May 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-45250?
CVE-2025-45250 is considered a high severity vulnerability due to its potential for Server-Side Request Forgery (SSRF) attacks.
2
How do I fix CVE-2025-45250?
To fix CVE-2025-45250, upgrade MrDoc to version 0.96 or later.
3
What type of vulnerability is CVE-2025-45250?
CVE-2025-45250 is a Server-Side Request Forgery (SSRF) vulnerability.
4
Which versions of MrDoc are affected by CVE-2025-45250?
MrDoc versions 0.95 and earlier are affected by CVE-2025-45250.
5
Where is the vulnerable code located for CVE-2025-45250?
The vulnerability in CVE-2025-45250 is found in the validate_url function of the app_doc/utils.py file.