CVE-2025-34231: Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.php
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind server-side request forgery (SSRF) vulnerability. The '/var/www/app/consolerelease/hp/badgeSetup.php' script is reachable from the Internet without any authentication and builds URLs from user‑controlled parameters before invoking either the custom processCurl() function or PHP’s filegetcontents(); in both cases the hostname/URL is taken directly from the request with no whitelist, scheme restriction, IP‑range validation, or outbound‑network filtering. Consequently, any unauthenticated attacker can force the server to issue arbitrary HTTP requests to internal resources. This enables internal network reconnaissance, credential leakage, pivoting, and data exfiltration. This vulnerability has been confirmed to be remediated, but it is unclear as to when the patch was introduced.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34231?
CVE-2025-34231 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2025-34231?
To fix CVE-2025-34231, upgrade Vasion Print to version 25.1.102 or higher and Vasion Application to version 25.1.1413 or higher.
What types of vulnerabilities are present in CVE-2025-34231?
CVE-2025-34231 contains both blind and non-blind server-side request forgery (SSRF) vulnerabilities.
Which versions of Vasion products are affected by CVE-2025-34231?
Versions of Vasion Print prior to 25.1.102 and Vasion Application prior to 25.1.1413 are affected by CVE-2025-34231.
Is there any specific part of the Vasion software that is vulnerable in CVE-2025-34231?
Yes, the vulnerability affects the '/var/www/app/console_release/hp/badgeSetup.php' file in the Vasion software.