CVE-2025-10393
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
Summary
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
Original description
The description as published by the source.
A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com