BaseFortify

Publication date: 2025-10-13

Last updated on: 2025-10-14

Assigner: TWCERT/CC

Description

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-13

Last Modified

2025-10-14

Generated

2026-07-06

AI Q&A

2025-10-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-11674

Affected Vendors & Products

Vendor	Product	Version / Range
piextract	soop-clm	5.2
piextract	soop-clm	5.3
piextract	soop-clm	6.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

CVE-2025-11674 is a Server-Side Request Forgery (SSRF) vulnerability in SOOP-CLM developed by PiExtract. It allows privileged remote attackers to trick the server into making unauthorized requests, which can lead to reading server files or probing internal network information. This means an attacker with administrative privileges can exploit this flaw to access sensitive data or gather information about the internal network. [1, 2]

Impact Analysis

This vulnerability can impact you by allowing a privileged remote attacker to read sensitive server files or gather information about your internal network. This could lead to exposure of confidential data and potentially aid further attacks by revealing internal network structure or sensitive information stored on the server. [1, 2]

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to update SOOP-CLM to version 6.0.0 or later. [1, 2]

Hi! I’m here to help you understand CVE-2025-11674. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70