VULNERABILITY INTELLIGENCE

CVE-2025-69239

CVSS score5.1 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-03-16
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

Description

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request. This issue was fixed in version 1.4.6.

Weakness classification

  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references