6 matches found
EUVD-2025-13633
Malicious code in bioql PyPI...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
mrdoc 安全漏洞
mrdoc is a python based online documentation system by the individual developer of zmister2016. A security vulnerability exists in mrdoc 0.9.5 and earlier versions, which stems from the validateurl function leading to server-side request forgery...
CVE-2025-45250
MrDoc (versions 0.95 and before ) is vulnerable to Server-Side Request Forgery (SSRF) due to a flaw in the validate_url function located in the app_doc/utils.py file. An authenticated attacker (requiring a session cookie) can exploit this by sending a JSON payload to the /upload_doc_img/ endpoint...
