CVE-2025-9414

Katalog CVE

CVSS 4.9 · Medium EPSS 0,30%

Kerentanan Server-Side Request Forgery (SSRF) pada kodcloud kodbox. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

25 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.321256 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.633727 advisory pihak ketiga · vdb entry
• https://gist.github.com/SysEternals/a03d45b582451f243f9c24076593c49c product
• https://vuldb.com/?ctiid.321256 permissions required · vdb entry