Lucene search
+L

68 matches found

RedhatCVE
RedhatCVE
added 2025/07/13 6:14 p.m.24 views

CVE-2025-53641

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

8.2CVSS6.3AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/11 6:15 p.m.13 views

CVE-2025-53641

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

8.2CVSS0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/07/11 5:28 p.m.8 views

CVE-2025-53641 Postiz allows header mutation in middleware facilitates resulting in SSRF

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

8.2CVSS6.9AI score0.00247EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/11 5:28 p.m.37 views

CVE-2025-53641

CVE-2025-53641 affects Postiz frontend (versions 1.45.1–1.62.3). The vulnerability arises from the ability to inject arbitrary HTTP headers into the middleware pipeline, enabling server-side request forgery (SSRF) to initiate unauthorized outbound requests from the hosting server. Fix: upgrade to...

8.2CVSS6.3AI score0.00247EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/11 5:28 p.m.11 views

CVE-2025-53641 Postiz allows header mutation in middleware facilitates resulting in SSRF

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

8.2CVSS6.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/07/11 5:28 p.m.20 views

CVE-2025-53641 Postiz allows header mutation in middleware facilitates resulting in SSRF

Postiz is an AI social media scheduling tool. From 1.45.1 to 1.62.3, the Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This flaw enables a server-side request forgery SSRF condition, which can be exploited to initiate unauthorized...

8.2CVSS0.00247EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/11 12:0 a.m.6 views

Gitroom Postiz 代码问题漏洞

Gitroom Postiz is a social media scheduling tool from Gitroom open source. A code issue vulnerability exists in Gitroom Postiz versions 1.45.1 through 1.62.3, which stems from HTTP header injection and could lead to server-side request forgery...

8.2CVSS7.2AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/11 12:0 a.m.8 views

PT-2025-29269 · Postiz · Postiz

Name of the Vulnerable Software and Affected Versions: Postiz versions 1.45.1 through 1.62.3 Description: The Postiz frontend application allows an attacker to inject arbitrary HTTP headers into the middleware pipeline. This enables a server-side request forgery SSRF condition, allowing...

8.2CVSS6.5AI score0.00247EPSS
SaveExploits0References7
Rows per page
Query Builder