CVE-2025-28089

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-28089
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-28089.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-28089
Published
2025-03-28T22:15:17Z
Modified
2025-05-24T03:40:00.651546Z
Summary
[none]
Details

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.

References

Affected packages

Git / github.com/magicblack/maccms10

Affected ranges

Type
GIT
Repo
https://github.com/magicblack/maccms10
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

V2024.*

V2024.1000.4000
V2024.1000.4010
V2024.1000.4030
V2024.1000.4040

v2020.*

v2020.1000.1035
v2020.1000.1042
v2020.1000.1062
v2020.1000.1068
v2020.1000.1068b
v2020.1000.1069
v2020.1000.1074
v2020.1000.1075
v2020.1000.1080
v2020.1000.1081

v2021.*

v2021.1000.1081

v2022.*

v2022.1000.1099
v2022.1000.3001
v2022.1000.3002
v2022.1000.3004
v2022.1000.3005
v2022.1000.3025
v2022.1000.3026
v2022.1000.3027
v2022.1000.3028
v2022.1000.3029
v2022.1000.3030
v2022.1000.3031
v2022.1000.3032

v2023.*

v2023.1000.3050
v2023.1000.3051
v2023.1000.3052

v2024.*

v2024.1000.3000
v2024.1000.4020
v2024.1000.4044
v2024.1000.4045
v2024.1000.4046