What is the CVSS score of CVE-2025-10695?

CVE-2025-10695 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Opensupports are affected by CVE-2025-10695?

CVE-2025-10695 presents moderate security risk, a server-side request forgery vulnerability rated CVSS 5.3. Users could be tricked into performing unintended actions.

Is there a public PoC exploit available for CVE-2025-10695?

Yes, a public proof-of-concept exploit is available for CVE-2025-10695. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-10695?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Opensupports CVE-2025-10695

EUVD-2025-32434 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2025-10-03 help@fluidattacks.com

SSRF Opensupports

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-32434

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

PoC Detected

Dec 22, 2025 - 13:45 vuln.today

Public exploit code

CVE Published

Oct 03, 2025 - 21:15 nvd

MEDIUM 5.3

DescriptionCVE.org

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => 'any', enabling unauthenticated SSRF for internal network scanning and service interaction.

This issue affects OpenSupports: 4.11.0.

Analysis

This issue affects OpenSupports: 4.11.0.

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.