CVE-2025-25827

MEDIUM

Emlog Pro 2.5.4 sort.php - Server-Side Request Forgery

Title source: manual

Description

A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL.

References (3)

Core 3

Core References

Not Applicable

http://emlogpro.com

Broken Link

https://github.com/Ka7arotto/emlog/blob/main/ssrf.md

Product

https://www.emlog.net/

Scores

CVSS v3 6.8

EPSS 0.0017

EPSS Percentile 6.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (1)

emlog/emlog 2.5.4

Published Feb 26, 2025

Tracked Since Feb 18, 2026