CVE-2025-25827

MediumCVSS 6.8

Published: 26/02/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A Server-Side Request Forgery (SSRF) vulnerability exists in the sort.php component of Emlog Pro v2.5.4. It allows an attacker to scan local and internal ports by supplying a crafted URL.

Risk Assessment

The risk involves an attacker being able to scan internal network ports, potentially leading to the discovery and exploitation of other vulnerable services.

Recommendation

It is recommended to immediately update Emlog Pro to the latest available version and implement URL validation and filtering in the sort.php component.

Original NVD description (English source)

A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL.