Exploit for CVE-2025-13796

CVE-2025-13796-PoC deco-cx apps Parameter analyticsScr...

CVE-2025-13796

CVE-2025-13796 affects deco-cx apps up to 0.120.1, specifically the AnalyticsScript function in website/loaders/analyticsScript.ts of the Parameter Handler component. The issue arises from improper handling of the url argument, enabling server-side request forgery (SSRF) and remote exploitation. ...