← Back

CVE-2025-25827

nvd nist
Published: Feb 26, 2025Modified: Apr 7, 2025

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Exploitability: 2.5 / Impact: 4.2
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL.

Affected (1)

Products: Emlog: Emlog
Emlog
1 product
Emlog
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Emlog
Version 2.5.4

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (3)

Source: cve@mitre.org
Not Applicable
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Product

Timeline

No history available yet.