What is the CVSS score of CVE-2025-69239?

CVE-2025-69239 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L. EPSS exploitation probability: 0.0%.

Which versions of Raytha are affected by CVE-2025-69239?

Organizations using Raytha CMS should be aware of moderate risk from CVE-2025-69239, a server-side request forgery vulnerability rated CVSS 5.1.. A patch is available.

How to fix or mitigate CVE-2025-69239?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Raytha CVE-2025-69239

EUVD-2025-208705 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-16 CERT-PL

SSRF Raytha

5.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

1.4.6

EUVD ID Assigned

Mar 16, 2026 - 12:00 euvd

EUVD-2025-208705

Analysis Generated

Mar 16, 2026 - 12:00 vuln.today

CVE Published

Mar 16, 2026 - 11:53 nvd

MEDIUM 5.1

DescriptionCVE.org

Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature. It allows an attacker with high privileges to provide the URL for redirecting server-side HTTP request.

This issue was fixed in version 1.4.6.

AnalysisAI

Raytha CMS contains a Server-Side Request Forgery (SSRF) vulnerability in its Theme Import from URL feature that allows authenticated high-privilege users to manipulate server-side HTTP requests to arbitrary destinations. An attacker with administrative or similar elevated privileges can leverage this to redirect the CMS server's outbound requests to internal systems, external resources, or arbitrary URLs, potentially leading to information disclosure or lateral movement attacks. The vulnerability affects versions prior to 1.4.6 and is fixed in version 1.4.6 and later.

Technical ContextAI

This vulnerability is rooted in CWE-918 (Server-Side Request Forgery), a class of attacks where an application makes HTTP requests to attacker-specified URLs without proper validation or restriction. In Raytha CMS (a content management system), the Theme Import from URL feature accepts user-supplied URLs and fetches remote theme files server-side. The application fails to implement adequate safeguards such as URL allowlisting, hostname validation, DNS rebinding protections, or blocking access to private IP address ranges (RFC 1918, link-local, loopback). When processing theme imports, the server does not restrict the destination of the HTTP request, allowing an attacker to craft requests to internal services (e.g., localhost:8080, 192.168.x.x), cloud metadata endpoints (169.254.169.254), or external malicious servers. The vulnerability requires high privileges (PR:H in CVSS v4.0), indicating the attacker must already possess administrative credentials or equivalent access to the CMS.

RemediationAI

Immediately upgrade Raytha CMS to version 1.4.6 or later, which includes patches to validate theme import URLs and prevent SSRF attacks. For organizations unable to patch immediately, implement network-level controls by restricting outbound connections from the CMS server to only approved external repositories and blocking access to private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8, and 169.254.0.0/16). Additionally, audit and minimize the number of users with administrative privileges, enforce strong authentication (multi-factor authentication), and monitor outbound HTTP requests from the CMS application for suspicious destinations. If theme imports are not essential, disable the Theme Import from URL feature entirely and switch to manual or pre-validated theme uploads.