Lucene search
K

EUVD-2025-18913

๐Ÿ—“๏ธย 03 Oct 2025ย 20:07:09Reported byย EUVDTypeย 
euvd
ย euvd
๐Ÿ”—ย euvd.enisa.europa.eu๐Ÿ‘ย 5ย Views

Critical vulnerability in Dromara MaxKey up to 4.1.7 causes server-side request forgery risk

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-6517
23 Jun 202518:50
โ€“circl
CNNVD
Dromara MaxKey ไปฃ็ ้—ฎ้ข˜ๆผๆดž
23 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-6517
23 Jun 202518:00
โ€“cve
Cvelist
CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
23 Jun 202518:00
โ€“cvelist
NVD
CVE-2025-6517
23 Jun 202518:15
โ€“nvd
OSV
CVE-2025-6517
23 Jun 202518:15
โ€“osv
Positive Technologies
PT-2025-26631 ยท Dromara ยท Dromara Maxkey
23 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-6517
25 Jun 202519:01
โ€“redhatcve
Vulnrichment
CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
23 Jun 202518:00
โ€“vulnrichment
[
  {
    "enisaIdVendor": [
      {
        "id": "8e62e989-a5b4-36e1-95dd-af09aee8de71",
        "vendor": {
          "name": "dromara"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "189785f3-2ba7-3209-bf97-102e4509fc4f",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.3"
      },
      {
        "id": "35117093-12d0-32b5-a6b2-f62615947517",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.1"
      },
      {
        "id": "551b31e4-8db7-36f1-b479-a335272101cd",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.2"
      },
      {
        "id": "5aededbd-8bec-3b89-b22a-61715f820a60",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.5"
      },
      {
        "id": "5debbbad-cf28-3264-b6cd-23ecfb7f80ac",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.7"
      },
      {
        "id": "c823a563-2fd1-3d04-98e9-51588bcec68d",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.0"
      },
      {
        "id": "df1ccb48-eaa0-3e30-a93e-9a0450f381fb",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.4"
      },
      {
        "id": "f01c8970-0943-3d04-ad54-13a1c1586817",
        "product": {
          "name": "MaxKey"
        },
        "product_version": "4.1.6"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.6Medium risk
Vulners AI Score6.6
CVSS 45.3
CVSS 3.16.3 - 9.8
CVSS 26.5
CVSS 36.3
EPSS0.00423
SSVC
5