Skip to content
OpenAdvisories

Product · magicblack

MacCMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-10397

    Magicblack MacCMS API server-side request forgery

    A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is pu…

    magicblack MacCMS
  • Medium 4.7
    CVE-2025-10395

    Magicblack MacCMS Scheduled Task col_url server-side request forgery

    A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible…

    magicblack MacCMS