Mrdoc

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mrdoc records in CISA KEV

No Mrdoc vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Mrdoc · all components

TI-2025-28749 CVE-2025-45250 · GHSA-qg2f-vrg7-hr49

MEDIUM 58

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.

CVSS 3.1MEDIUM 5.5 Adjacent network No auth User interaction EPSS 0.00292 Published 2025-05-06 No fix listed CWE-918

TI-2021-12240 CVE-2021-32568 · GHSA-7w8v-27p6-fvcw

LOW 36

mrdoc is vulnerable to Deserialization of Untrusted Data

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00824 Published 2021-09-06 Fixed in 0.7.1 CWE-502