CVE-2025-32355: SSRF
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32355?
CVE-2025-32355 is classified as a medium severity vulnerability due to its potential for exploitation via misconfigured reverse proxies.
How do I fix CVE-2025-32355?
To fix CVE-2025-32355, ensure proper configuration of the reverse proxy to prevent absolute URL specifications in HTTP request lines.
What types of systems are affected by CVE-2025-32355?
CVE-2025-32355 affects Rocket Software TRUfusion Enterprise versions up to and including 7.10.4.0.
What are the risks associated with CVE-2025-32355?
The risks associated with CVE-2025-32355 include potential unauthorized access to sensitive resources through the misconfigured proxy.
When was CVE-2025-32355 reported?
CVE-2025-32355 was reported in the context of security vulnerabilities within Rocket Software TRUfusion Enterprise.