CVE-2025-6517

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component Meta URL Handler. The manipulation of t...

CVE-2025-6517

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component Meta URL Handler. The manipulation of t...

CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component Meta URL Handler. The manipulation of t...

CVE-2025-6517

CVE-2025-6517 affects Dromara MaxKey (up to 4.1.7). The vulnerability is in the Add function of maxkey-webs/maxkey-web-mgt/src/main/java/org/dromara/maxkey/web/apps/controller/SAML20DetailsController.java (Meta URL Handler). Manipulation of the post argument enables server-side request forgery (S...

CVE-2025-6517 Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component Meta URL Handler. The manipulation of t...

PT-2025-26631 · Dromara · Dromara Maxkey

Name of the Vulnerable Software and Affected Versions: Dromara MaxKey versions up to 4.1.7 Description: A critical issue affects the function Add of the SAML20DetailsController.java file in the Meta URL Handler component. The manipulation of the post argument leads to server-side request forgery,...

Dromara MaxKey 代码问题漏洞

Dromara MaxKey is an IAM-IDaas identity management and authentication product from Dromara open source. A code issue vulnerability exists in Dromara MaxKey version 4.1.7 and earlier, which stems from a misbehavior of the parameter post, leading to server-side request forgery...