Vulnerability · Published May 29, 2025 · Assigned by VulDB

CVE-2025-5327chshcms mccms Gf.php index server-side request forgery

Medium 6.3

In plain English

A medium-severity server-side request forgery in mccms from chshcms. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.6%top 52.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
chshcms	mccms	2.7

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-310497 | chshcms mccms Gf.php index server-side request forgery vdb-entry, technical-description
VDB-310497 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #582295 | https://gitee.com/chshcms/mccms mccms 2.7 Server-Side Request Forgery third-party-advisory
https://github.com/caigo8/CVE-md/blob/main/Mccms_V2.7/%E5%89%8D%E5%8F%B0SSRF.md exploit