Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts user-supplied URLs and performs server-side HTTP or HTTPS requests without sufficient validation or destination restrictions. The implementation does not enforce allowlists, block internal or private IP address ranges, or apply request timeouts or response size limits. An attacker can abuse this behavior to induce the server to issue outbound requests to arbitrary hosts, including internal network resources, potentially enabling internal network scanning and denial of service through resource exhaustion.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-25870 Server-Side Request Forgery (SSRF) in DoraCMS 3.1 UEditor Image Fetch Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25870
Post summary
The text announces a Server‑Side Request Forgery vulnerability in DoraCMS 3.1’s UEditor image fetch feature, without indicating exploitation or remediation.
CVE-2026-25870 DoraCMS version 3.1 and prior contains a server-side request forgery (SSRF) vulnerability in its UEditor remote image fetch functionality. The application accepts use… https://www.cve.org/CVERecord?id=CVE-2026-25870
Post summary
CVE-2026-25870 is a server‑side request forgery vulnerability in DoraCMS 3.1 and earlier, affecting the UEditor remote image fetch feature. No PoC, exploit, patch, or active exploitation information is provided.