CVE-2025-45872

Description

zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl parameter.

PUBLISHED Reserved 2025-04-22 | Published 2025-07-01 | Updated 2025-07-08 | Assigner mitre

References

github.com/...File Overwrite Leading to RCE Vulnerability.md exploit

github.com/...File Overwrite Leading to RCE Vulnerability.md

cve.org (CVE-2025-45872)

nvd.nist.gov (CVE-2025-45872)

Download JSON