CVE-2025-10393 – miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery

CVE ID : CVE-2025-10393

Published : Sept. 14, 2025, 6:15 a.m. | 33 minutes ago

Description : A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…