CVE-2025-61768

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue.

CVSS

No CVSS.

References

Link	Resource
https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2
https://github.com/xuemian168/kuno/releases/tag/v1.3.15
https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm

Configurations

No configuration.

History

09 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) KUNO CMS es una aplicación de blog full-stack completamente desplegable. En versiones anteriores a la 1.3.15, existe una vulnerabilidad de SSRF (falsificación de petición del lado del servidor) en el módulo de Medios del panel administrativo de Kuno CMS. Un administrador con sesión iniciada puede subir un archivo SVG especialmente diseñado que contenga una referencia de imagen externa, lo que provoca que el servidor inicie una conexión saliente a una URL externa arbitraria. Esto puede conducir a la revelación de información o al sondeo de la red interna. La versión 1.3.15 contiene una solución para el problema.

Information

Published : 2025-10-06 22:15

Updated : 2026-10-09 10:10

NVD link : CVE-2025-61768

Mitre link : CVE-2025-61768

CVE.ORG link : CVE-2025-61768

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

CWE-434

Unrestricted Upload of File with Dangerous Type

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2025-61768", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-61768", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-07T15:51:15.126839Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "xuemian168", "product": "kuno", "versions": [{"status": "affected", "version": "< 1.3.15"}]}]}], "published": "2025-10-06T22:15:37.273", "references": [{"url": "https://github.com/xuemian168/kuno/commit/804b2909c65b16ae2063d0f992e0711aa09475e2", "source": "security-advisories@github.com"}, {"url": "https://github.com/xuemian168/kuno/releases/tag/v1.3.15", "source": "security-advisories@github.com"}, {"url": "https://github.com/xuemian168/kuno/security/advisories/GHSA-4f5f-2c49-5mwm", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-434"}, {"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue."}, {"lang": "es", "value": "KUNO CMS es una aplicaci\u00f3n de blog full-stack completamente desplegable. En versiones anteriores a la 1.3.15, existe una vulnerabilidad de SSRF (falsificaci\u00f3n de petici\u00f3n del lado del servidor) en el m\u00f3dulo de Medios del panel administrativo de Kuno CMS. Un administrador con sesi\u00f3n iniciada puede subir un archivo SVG especialmente dise\u00f1ado que contenga una referencia de imagen externa, lo que provoca que el servidor inicie una conexi\u00f3n saliente a una URL externa arbitraria. Esto puede conducir a la revelaci\u00f3n de informaci\u00f3n o al sondeo de la red interna. La versi\u00f3n 1.3.15 contiene una soluci\u00f3n para el problema."}], "lastModified": "2026-10-09T10:10:00.193", "sourceIdentifier": "security-advisories@github.com"}