A Server-Side Request Forgery (SSRF) vulnerability in the Drupal AI SEO Link Advisor allows for unauthorized server requests. This issue affects versions from 0.0.0 up to 1.0.6. Exploiting this vulnerability could lead to unauthorized access to internal resources.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.7 | CVE-2025-8675 |
Exploitation
To exploit this vulnerability, an attacker can craft a request that targets the AI SEO Link Advisor, leveraging the SSRF flaw to send requests to internal services or resources that should not be accessible externally. This requires the attacker to have some level of interaction with the application.
Affected Products
- AI SEO Link Advisor: Affected from version 0.0.0 to 1.0.6, this product is vulnerable to SSRF attacks, allowing unauthorized server requests.
Mitigation
To mitigate this vulnerability, it is recommended to update the AI SEO Link Advisor to version 1.0.6 or later. Additionally, implementing network access controls can help limit the potential impact of SSRF vulnerabilities.