CVE-2025-45250
MEDIUM 5.5EPSS 0.3%
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.
- CVSS v3.1 CNA
- 5.5 MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - EPSS
- 0.29% chance of exploitation in the next 30 days, 20th percentile
- Published
- 2025-05-06
Proof-of-concept exploits (2)
- Anike-x/CVE-2025-452500★ · 2025-05-07
- xp3s/CVE-2025-452500★ · 2025-05-06