Threats Tagged 'cve-2025-20371'

View all threats tagged with 'cve-2025-20371'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Instant breach scanning across billions of leaked records. Free tier available.

Filter Threats

Narrow down the results by type, severity, or affected countries

Type

Severity

Country

Tag

Time Range

Sort By

Active filters (1):Tag: cve-2025-20371

Click on any threat for detailed analysis and mitigation recommendations


CVE-2025-20371: The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. in Splunk Splunk EnterpriseCVE-2025-20371 0 In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user. HighVulnerabilityUnited StatesUnited KingdomGermany+8#cve #cve-2025-20371 Join the discussion	CVE Database V5	10/01/2025, 16:08:02 UTC Added: 10/01/2025, 16:17:05 UTC

Showing 1 to 1 of 1 result

Filters:Tag: cve-2025-20371

Page 1 of 1

OffSeq TrainingCredly Certified

Technical5-day eLearningPECB Accredited