PT-2025-41774 · Piextract · Soop-Clm

Naro + 1 · Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-11674

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SOOP-CLM (affected versions not specified)

Description SOOP-CLM developed by PiExtract is subject to a Server-Side Request Forgery issue. This allows attackers with sufficient privileges to remotely access server files and gather details about the internal network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-11674

Affected Products

Soop-Clm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11674 · Security Note
• https://twcert.org.tw/en/cp-139-10422-e06c3-2.html · Note
• https://t.me/CVEtracker/34765 · Telegram Post
• https://t.me/cveNotify/138438 · Telegram Post
• https://twcert.org.tw/tw/cp-132-10421-5cf6b-1.html · Note