CVE-2025-10393
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
概要
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com