Security Advisory

CVE-2025-10695

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-03 20:39:08

Last updated 2025-10-06 14:22:14

Assigner Fluid Attacks

State PUBLISHED

Description

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => any, enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects OpenSupports: 4.11.0.

← Browse all CVEs View on cve.org ↗