Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery (SSRF) vulnerability in the xmlrpc.sock handler.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00405·Published 2025-10-30·Fixed in 2023-08-10CWE-306