A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows attackers to forcefully initiate connections to arbitrary internal and external resources via a crafted request. This can lead to sensitive data exposure.
CVSS
No CVSS.
References
Configurations
No configuration.
History
18 Jul 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-18 19:15
Updated : 2025-07-18 19:15
NVD link : CVE-2025-52163
Mitre link : CVE-2025-52163
JSON object : View
Products Affected
No product.
CWE
No CWE.