CVE-2025-10471
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A vulnerability was detected in ZKEACMS 4.3 in the Proxy function of MediaController.cs. Manipulating the url argument results in server-side request forgery. The attack can be initiated remotely and the exploit is publicly available.
Risk Assessment
SSRF can allow an attacker to make requests from the server to internal resources, potentially leading to data exposure or further attacks within the internal network.
Recommendation
Update ZKEACMS to the latest version if a fix is available, or restrict access to the Proxy function and validate URL arguments. Consider deploying WAF rules to block suspicious requests.
Other vulnerabilities in ZKEACMS
See all- CVE-2026-111633High
ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize endpoints, modifying articles and products and reading form submissions.
- CVE-2025-52239Critical
An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.
Original NVD description (English source)
A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS