Security Advisory

CVE-2025-10471

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-15 16:32:07

Last updated 2025-09-16 15:46:24

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used.

← Browse all CVEs View on cve.org ↗