CVE-2025-20075CWE-918

Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0

High · published February 17, 2025

CVSS v3.0
7.2
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0. Executing arbitrary backend Web API requests could potentially lead to rebooting the services.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00355 · 27.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-02-17T23:57Z
EPSS history
Timeline
  • 17 FEB 23:57Z
    Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0
    cvelistv5