Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-22139 | An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery (SSRF). The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only reachable by the application server. |
Fri, 12 Sep 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Eveo
Eveo urve Web Manager |
|
| CPEs | cpe:2.3:a:eveo:urve_web_manager:27.02.2025:*:*:*:*:*:*:* | |
| Vendors & Products |
Eveo
Eveo urve Web Manager |
Mon, 21 Jul 2025 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-918 | |
| Metrics |
cvssV3_1
|
Mon, 21 Jul 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery (SSRF). The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only reachable by the application server. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-07-21T19:00:44.901Z
Reserved: 2025-04-15T00:00:00.000Z
Link: CVE-2025-36845
Vulnrichment
Updated: 2025-07-21T18:59:47.698Z
NVD
Status : Analyzed
Published: 2025-07-21T18:15:27.467
Modified: 2025-09-12T18:09:34.617
Link: CVE-2025-36845
Redhat
No data.
OpenCVE Enrichment
No data.