CVE-2025-15098 YunaiV yudao-cloud Business Process Management BpmSyncHttpRequestTrigger server-side request forgery

A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger of the component Business Process Management. Executing manipulation of the argument url/header/body can lead to server-side request forgery. The attack m...

PT-2025-53439

Name of the Vulnerable Software and Affected Versions YunaiV yudao-cloud versions prior to 2025.11 Description A server-side request forgery condition exists in the Business Process Management component, specifically within the BpmHttpCallbackTrigger/BpmSyncHttpRequestTrigger function. Manipulati...