Lucene search
K

CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery

๐Ÿ—“๏ธย 23 Jun 2025ย 18:00:15Reported byย VulDBTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 11ย Views

Critical server-side request forgery vulnerability in Dromara MaxKey up to version 4.1.7 found.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-6517
23 Jun 202518:50
โ€“circl
CNNVD
Dromara MaxKey ไปฃ็ ้—ฎ้ข˜ๆผๆดž
23 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-6517
23 Jun 202518:00
โ€“cve
EUVD
EUVD-2025-18913
3 Oct 202520:07
โ€“euvd
NVD
CVE-2025-6517
23 Jun 202518:15
โ€“nvd
OSV
CVE-2025-6517
23 Jun 202518:15
โ€“osv
Positive Technologies
PT-2025-26631 ยท Dromara ยท Dromara Maxkey
23 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-6517
25 Jun 202519:01
โ€“redhatcve
Vulnrichment
CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
23 Jun 202518:00
โ€“vulnrichment
[
  {
    "vendor": "Dromara",
    "product": "MaxKey",
    "versions": [
      {
        "version": "4.1.0",
        "status": "affected"
      },
      {
        "version": "4.1.1",
        "status": "affected"
      },
      {
        "version": "4.1.2",
        "status": "affected"
      },
      {
        "version": "4.1.3",
        "status": "affected"
      },
      {
        "version": "4.1.4",
        "status": "affected"
      },
      {
        "version": "4.1.5",
        "status": "affected"
      },
      {
        "version": "4.1.6",
        "status": "affected"
      },
      {
        "version": "4.1.7",
        "status": "affected"
      }
    ],
    "modules": [
      "Meta URL Handler"
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Jun 2025 18:00Current
CVSS 45.3
CVSS 3.16.3
CVSS 36.3
CVSS 26.5
EPSS0.00363
11