CVE-2025-36845

HIGHNuclei

Eveo URVE Web Manager - Server-Side Request Forgery

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2025-36845 has a selected CVSS score of 8.6 (high); EIP currently links 1 Nuclei template.

Description

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery (SSRF). The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only reachable by the application server.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 21, 2025 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryHIGHEveo URVE Web Manager - Server-Side Request Forgery

Eveo URVE Web Manager 27.02.2025 contains a server-side request forgery caused by improper validation of URL input in /_internal/redirect.php, letting attackers make requests to internal endpoints, exploit requires crafted URL input.

Impact

Attackers can make requests to internal-only accessible endpoints, potentially exposing sensitive internal services or data.

Remediation

Update to the latest version with SSRF protections or apply input validation to restrict URL requests.

AuthorsDhiyaneshDk
Template tagscvecve2025eveossrfoastoob
Shodan: html:"URVE Web Manager"
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-035.txt https://smartoffice.expert/en

Source: ProjectDiscovery

References

3