| Title | https://www.maxkey.top/ https://gitee.com/dromara/MaxKey 4.1.7_Latest version Server-Side Request Forgery |
|---|
| Description | The open source industry-leading IAM-IDaas identity management and authentication product https://gitee.com/dromara/MaxKey has multiple SSRF vulnerabilities. |
|---|
| Source | ⚠️ https://github.com/honorseclab/vulns/blob/main/dromara_MaxKey/SSRF.md |
|---|
| User | Anonymous User |
|---|
| Submission | 06/09/2025 11:20 (10 months ago) |
|---|
| Moderation | 06/23/2025 14:21 (14 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 313637 [Dromara MaxKey up to 4.1.7 Meta URL SAML20DetailsController.java add post server-side request forgery] |
|---|
| Points | 15 |
|---|