CVE-2023-1725 CRITICAL

CVE-2023-1725: SSRF in Infoline Project Management System

Vendor Infoline

Product Project Management System

Weakness CWE-918 · SSRF

Published March 30, 2023

Last update May 22, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery. This issue affects Project Management System: before 4.09.31.125.

Key dates

02Disclosure timeline

March 30, 2023 CVE published

May 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-1725 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/918.html

Related vulnerabilities

04Related CVE

CVE-2026-44428 MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience CVE-2024-21642 D-Tale server-side request forgery through Web uploads CVE-2024-56471 IBM Aspera Shares Server-Side Request Forgery CVE-2026-0688 Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgery CVE-2025-69014 WordPress Youzify plugin <= 1.3.7 - Server Side Request Forgery (SSRF) vulnerability