PT-2025-17291 · Pbootcms · Pbootcms

·

CVE-2025-3787

·

Published

2025-04-18

·

Updated

2025-04-23

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PbootCMS version 3.2.5
Description A vulnerability was found in the Image Handler component, which can lead to server-side request forgery. The manipulation can be launched remotely.
Recommendations For PbootCMS version 3.2.5, consider restricting access to the Image Handler component until a patch is available. As a temporary workaround, avoid using the vulnerable function of the Image Handler component to minimize the risk of exploitation.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-3787

Affected Products

Pbootcms