ZKEACMS vulnerabilities
We track 1 vulnerability in ZKEACMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest ZKEACMS vulnerabilities
- 8.8 High severity
ZKEACMS: Server-Side Request Forgery
A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. It is possible to initiate the attack remote