{"id":59685,"date":"2025-07-27T16:33:33","date_gmt":"2025-07-27T16:33:33","guid":{"rendered":""},"modified":"2025-10-06T05:35:34","modified_gmt":"2025-10-06T11:35:34","slug":"cve-2025-36845-server-side-request-forgery-ssrf-vulnerability-in-eveo-urve-web-manager","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-36845-server-side-request-forgery-ssrf-vulnerability-in-eveo-urve-web-manager\/","title":{"rendered":"CVE-2025-36845: Server-Side Request Forgery (SSRF) Vulnerability in Eveo URVE Web Manager<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, identified as CVE-2025-36845, has been discovered in Eveo URVE Web Manager, version 27.02.2025. This vulnerability, a Server-Side Request Forgery (SSRF), poses a significant risk to any organization using the affected software due to its potential for system compromise and data leakage. Given the high CVSS severity score of 8.6, immediate action is required to mitigate this risk and protect sensitive data and systems from potential<\/a> exploitation.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-36845
\nSeverity: Critical (CVSS 8.6)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Eveo URVE Web Manager<\/a> | Version 27.02.2025<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability resides in the \/_internal\/redirect.php endpoint<\/a>. This endpoint accepts a URL as an input, sends a request to this address, and then reflects the content in the response. Attackers can exploit<\/a> this by providing a URL of a sensitive internal resource, which would normally be unreachable from the outside network, leading to SSRF. This allows the attacker to bypass firewalls and gain access<\/a> to the internal network, potentially leading to system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

The following is a conceptual HTTP request<\/a> that demonstrates how an attacker might exploit this vulnerability:<\/p>\n

GET \/_internal\/redirect.php?url=http:\/\/internal-sensitive-resource HTTP\/1.1\nHost: vulnerable.example.com\nContent-Type: application\/json<\/code><\/pre>\n
The “url” parameter is manipulated to request a sensitive internal resource that should not be accessible<\/a> from outside. The server then performs the request and returns the response, giving the attacker access to the sensitive data<\/a>.<\/p>\n
Mitigation and Prevention<\/strong><\/p>\n
Organizations are advised to apply the vendor-supplied patch immediately. If this is not possible, the use of a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary mitigation against the exploit. Regularly updating and patching systems is critical for maintaining a strong security<\/a> posture.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview A critical vulnerability, identified as CVE-2025-36845, has been discovered in Eveo URVE Web Manager, version 27.02.2025. This vulnerability, a Server-Side Request Forgery (SSRF), poses a significant risk to any organization using the affected software due to its potential for system compromise and data leakage. Given the high CVSS severity score of 8.6, immediate action […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[101],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59685","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-ssrf"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t