CVE-2025-1799 | Zorlan SkyCaiji 2.9 Tool.php previewAction data server-side request forgery

CVE-2025-1799 | Zorlan SkyCaiji 2.9 Tool.php previewAction data server-side request forgery

A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument data leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2025-1799. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.