Read the docs
TI-2025-38161 Aliases CVE-2025-61768

Kuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG Upload

Priority MEDIUM 56CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
Low · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434.

Summary

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00335 27th percentileScored 2026-11-07
Fix Fixed kuno (xuemian168): 1.3.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
xuemian168kunobefore 1.3.151.3.15Patch availableCNA
  • kuno Vendorxuemian168 Affected before 1.3.15 Fixed in 1.3.15 Patch available CNA

Remediation

  • Fix · CNA kuno (xuemian168) Fixed in 1.3.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-61768

References

Other 3

  • TI-2025-38113 Kuno is Vulnerable to Stored XSS Attack via SVG File Upload CVSS 3.1MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences