A vulnerability marked as critical has been reported in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery.
This vulnerability is documented as CVE-2025-10397. The attack can be initiated remotely. Additionally, an exploit exists.
