CVE-2025-61768

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-61768", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-09-30T19:43:49.900Z", "datePublished": "2025-10-06T21:54:50.656Z", "dateUpdated": "2025-10-07T15:51:31.246Z"}, "containers": {"cna": {"title": "Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload", "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "lang": "en", "description": "CWE-20: Improper Input Validation", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-434", "lang": "en", "description": "CWE-434: Unrestricted Upload of File with Dangerous Type", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm"}, {"name": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2", "tags": ["x_refsource_MISC"], "url": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2"}, {"name": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15", "tags": ["x_refsource_MISC"], "url": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15"}], "affected": [{"vendor": "xuemian168", "product": "kuno", "versions": [{"version": "< 1.3.15", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-10-06T21:54:50.656Z"}, "descriptions": [{"lang": "en", "value": "KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue."}], "source": {"advisory": "GHSA-4f5f-2c49-5mwm", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-07T15:51:15.126839Z", "id": "CVE-2025-61768", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-07T15:51:31.246Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload", "source": {"advisory": "GHSA-4f5f-2c49-5mwm", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW"}}], "affected": [{"vendor": "xuemian168", "product": "kuno", "versions": [{"status": "affected", "version": "< 1.3.15"}]}], "references": [{"url": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm", "name": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2", "name": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15", "name": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20: Improper Input Validation"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434: Unrestricted Upload of File with Dangerous Type"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-10-06T21:54:50.656Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-61768", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-07T15:51:15.126839Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2025-10-07T15:51:25.775Z"}}]}, "cveMetadata": {"cveId": "CVE-2025-61768", "state": "PUBLISHED", "dateUpdated": "2025-10-06T21:54:50.656Z", "dateReserved": "2025-09-30T19:43:49.900Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-10-06T21:54:50.656Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "kuno", "vendor": "xuemian168", "versions": [{"status": "affected", "version": "< 1.3.15"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue."}, {"lang": "es", "value": "KUNO CMS es una aplicaci\u00f3n de blog full-stack completamente desplegable. En versiones anteriores a la 1.3.15, existe una vulnerabilidad de SSRF (falsificaci\u00f3n de petici\u00f3n del lado del servidor) en el m\u00f3dulo de Medios del panel administrativo de Kuno CMS. Un administrador con sesi\u00f3n iniciada puede subir un archivo SVG especialmente dise\u00f1ado que contenga una referencia de imagen externa, lo que provoca que el servidor inicie una conexi\u00f3n saliente a una URL externa arbitraria. Esto puede conducir a la revelaci\u00f3n de informaci\u00f3n o al sondeo de la red interna. La versi\u00f3n 1.3.15 contiene una soluci\u00f3n para el problema."}], "id": "CVE-2025-61768", "lastModified": "2026-10-09T10:10:00.193", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-61768", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-07T15:51:15.126839Z", "version": "2.0.3"}}]}, "published": "2025-10-06T22:15:37.273", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2"}, {"source": "security-advisories@github.com", "url": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15"}, {"source": "security-advisories@github.com", "url": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-434"}, {"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"created": "2025-10-08T13:39:16.117091+00:00", "updated": "2025-10-08T13:39:16.117117+00:00", "vendors": ["kuno", "kuno$PRODUCT$kuno_cms"]}