CVE-2025-45872

CRITICAL CVSS: 9.8 Published: 2025-07-01 Modified: 2026-06-17

Description

zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl parameter.

Affected Platforms

Zrlog Zrlog

Weakness Type

CWE-918

References