maccms10 Server-Side Request Forgery Vulnerability in Add Article Feature

A Server-Side Request Forgery (SSRF) vulnerability has been identified in maccms10 version 2025.1000.4047. This vulnerability occurs in the 'Add Article' feature, allowing attackers to send crafted requests from the server to internal or external resources.

Impact

Exploitation of this vulnerability allows for Server-Side Request Forgery, where an attacker can manipulate the server to make requests on their behalf. This could potentially be used to access internal services or resources that are not normally exposed to the outside world.

Reproduction

To reproduce this vulnerability, access the 'Add Article' feature and enter a Burp Suite Collaborator address. Once the address is submitted, the server will automatically access the Collaborator address, which can be verified by the request received in Burp Suite.