CVE-2025-45887

Yifang CMS v2.0.2 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the /api/file/getRemoteContent endpoint. The CVE-2025-45887 entry shows a CVSSv3.1 base score of 9.1 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and no user interaction...

Yifang Cloud Web Disk has Elevation of Privilege Vulnerability

Yifang Cloud Web Disk is a file cloud storage software. A privilege elevation vulnerability exists in Yifang Cloud Web Disk. An attacker can exploit the vulnerability to elevate privileges...