PT-2025-41774 · Piextract · Soop-Clm

Naro + 1 · Publicado 2025-10-13 · Atualizado 2025-10-13 · CVE-2025-11674

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SOOP-CLM (affected versions not specified)

Description SOOP-CLM developed by PiExtract is subject to a Server-Side Request Forgery issue. This allows attackers with sufficient privileges to remotely access server files and gather details about the internal network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2025-11674

Produtos afetados

Soop-Clm

Referências · 5

• https://twcert.org.tw/en/cp-139-10422-e06c3-2.html · Nota
• https://t.me/CVEtracker/34765 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-11674 · Nota de Segurança
• https://t.me/cveNotify/138438 · Publicação no Telegram
• https://twcert.org.tw/tw/cp-132-10421-5cf6b-1.html · Nota