Security Advisory

CVE-2025-10695

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-03 20:39:08

Last updated 2025-10-06 14:22:14

Assigner Fluid Attacks

CVSS score 6.9

State PUBLISHED

Description

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects OpenSupports: 4.11.0.

← Browse all CVEs View on cve.org ↗