VULNERABILITY INTELLIGENCE

CVE-2025-45250

CVSS score5.5 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-05-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Description

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.