Skip to content

[v5.11] Backport CVE-2025-7759: 禁用UEditor图片抓取器,对CMS模版查看的地址进行限定 - #37

Open
vulgraph wants to merge 1 commit into
thinkgem:v5.11from
vulgraph:backport/CVE-2025-7759-v5.11
Open

vulgraph wants to merge 1 commit into
thinkgem:v5.11from
vulgraph:backport/CVE-2025-7759-v5.11

Conversation

@vulgraph

@vulgraph vulgraph commented May 4, 2026

Copy link
Copy Markdown

Backport of upstream fix for CVE-2025-7759 to v5.11.

  • Upstream commit: 1c5e49b081 — 禁用UEditor图片抓取器,对CMS模版查看的地址进行限定
  • Cherry-picked with git cherry-pick -x (original author preserved).

Apply was clean against the current tip of the target branch. No code changes on top of the upstream fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants