PT-2025-38834 · Unknown · Makestories

Nabil Irawan

·

CVE-2025-57984

·

Publicado

2025-09-22

·

Atualizado

2025-09-22

CVSS v3.1

4.4

Média

VetorAV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions MakeStories (for Google Web Stories) versions through 3.0.4
Description A Server-Side Request Forgery (SSRF) vulnerability exists in MakeStories (for Google Web Stories). This issue allows Server Side Request Forgery. The vulnerability potentially impacts the ability of the application to securely handle external requests, potentially allowing an attacker to make requests on behalf of the server.
Recommendations Update MakeStories (for Google Web Stories) to a version later than 3.0.4.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2025-57984

Produtos afetados

Makestories