CVE-2025-10393
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
Résumé
miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com