EUVD-2025-199932

A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument Base results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-13789

A vulnerability was found in ZenTao up to 21.7.6-8564. This affects the function makeRequest of the file module/ai/model.php. The manipulation of the argument Base results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-13789

ZenTao up to 21.7.6-8564 is affected by a vulnerability in the makeRequest function of module/ai/model.php where improper handling of the Base parameter enables server-side request forgery (SSRF). The issue is exploitable remotely, and public exploits have been reported. Upgrading to version 21.7...