CVE-2025-45250

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...

CVE-2025-45250

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...

CVE-2025-45250

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...

CVE-2025-45250

MrDoc (versions 0.95 and before ) is vulnerable to Server-Side Request Forgery (SSRF) due to a flaw in the validate_url function located in the app_doc/utils.py file. An authenticated attacker (requiring a session cookie) can exploit this by sending a JSON payload to the /upload_doc_img/ endpoint...