CVE-2025-45939

MEDIUM

Apwide Golive 10.2.0 - Server-Side Request Forgery via Test Webhook Function

Title source: llm

Apwide Golive 10.2.0 Jira plugin allows Server-Side Request Forgery (SSRF) via the test webhook function.

Core 2

Core References

Not Applicable

Release Notes

CVSS v3 6.5

EPSS 0.0027

EPSS Percentile 18.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-918

Status published

Products (1)

apwide/golive 10.2.0

Published Jul 25, 2025

Tracked Since Feb 18, 2026