CVE-2025-65836

Critical

Published: 01/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

PublicCMS V5.202506.b is vulnerable to SSRF in the chat interface of SimpleAiAdminController.

Risk Assessment

The risk includes potential use of the server to attack internal network resources, which could lead to disclosure of sensitive information or further compromise.

Recommendation

It is recommended to update to the latest version of PublicCMS and restrict access to the chat interface to trusted users only.

Original NVD description (English source)

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.