PT-2025-38855 · Smartdatasoft · Dricub

Bonds · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58005

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SmartDataSoft DriCub versions through 2.9

Description A Server-Side Request Forgery (SSRF) issue exists in SmartDataSoft DriCub. This allows for Server Side Request Forgery. The vulnerability allows an attacker to make requests on behalf of the server, potentially accessing internal resources or performing actions with the server's privileges.

Recommendations Update SmartDataSoft DriCub to a version later than 2.9.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-58005

Affected Products

Dricub

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58005 · Security Note
• https://patchstack.com/database/wordpress/theme/dricub-driving-school/vulnerability/wordpress-dricub-theme-2-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Theme/dricub-driving-school/vulnerability/wordpress-dricub-theme-2-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255681002635729 · Twitter Post