A Server-Side Request Forgery (SSRF) vulnerability exists that could allow unauthorized access to sensitive data. This occurs when an attacker configures the application to access a malicious URL, potentially leading to data breaches.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-54925 |
Exploitation
To exploit this vulnerability, an attacker must craft a request that directs the application to a malicious URL. By doing so, they can potentially access sensitive data that the application is not intended to expose.
Affected Products
- Schneider Electric applications that process URLs without proper validation, leading to SSRF vulnerabilities.
Mitigation
To mitigate this vulnerability, it is recommended to implement strict input validation and sanitization for URLs processed by the application. Additionally, network access controls should be enforced to limit the application’s ability to reach external URLs.