CVE-2025-11674
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-13

Last updated on: 2025-10-14

Assigner: TWCERT/CC

Description
SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-13
Last Modified
2025-10-14
Generated
2026-06-16
AI Q&A
2025-10-13
EPSS Evaluated
2026-06-15
NVD
CVE-2025-11674
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
piextract soop-clm 5.2
piextract soop-clm 5.3
piextract soop-clm 6.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-11674 is a Server-Side Request Forgery (SSRF) vulnerability in SOOP-CLM developed by PiExtract. It allows privileged remote attackers to trick the server into making unauthorized requests, which can lead to reading server files or probing internal network information. This means an attacker with administrative privileges can exploit this flaw to access sensitive data or gather information about the internal network. [1, 2]

Impact Analysis

This vulnerability can impact you by allowing a privileged remote attacker to read sensitive server files or gather information about your internal network. This could lead to exposure of confidential data and potentially aid further attacks by revealing internal network structure or sensitive information stored on the server. [1, 2]

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to update SOOP-CLM to version 6.0.0 or later. [1, 2]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-11674. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart