A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2. This affects the function
getArticle of the file app/modules/api/service/gather.js. The manipulation of the argument targetUrl leads to server-side request forgery.
This vulnerability is uniquely identified as CVE-2025-8133. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
