Approved changes feed: RSS · Atom

cpe:2.3:a:magicblack:maccms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMagicblack (4000e38f-8e67-554b-8ed0-071f995c3898)
ProductMaccms (139e3e80-5991-5b00-a6c8-c07ddc3f30ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10397 vulnerable 2026-06-08 07:02:26.801431 Magicblack MacCMS API server-side request forgery
MEDIUM (4.7)
A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used.
Published: 2025-09-14T11:02:05.683Z
Updated: 2025-09-15T20:13:17.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10395 vulnerable 2026-06-08 07:02:26.800426 Magicblack MacCMS Scheduled Task col_url server-side request forgery
MEDIUM (4.7)
A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.
Published: 2025-09-14T08:02:06.148Z
Updated: 2025-09-15T20:11:53.663Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.