EUVD-2026-25110Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L
Lifecycle Timeline
6DescriptionGitHub Advisory
Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-supplied Url parameter, allowing the use of the file:// protocol. This allows an authenticated administrator to force the backend server to interact with the local filesystem, which can lead to Local File Interaction (LFI) and potential disclosure of sensitive system information through side-channel analysis of internal logs. Version 7.23.0 contains a fix.
AnalysisAI
Blind Server-Side Request Forgery (SSRF) in Squidex prior to version 7.23.0 allows authenticated administrators to force the backend server to interact with the local filesystem via the file:// protocol in the Restore API's Url parameter, potentially disclosing sensitive system information through side-channel analysis of internal logs. No public exploit code or active exploitation has been identified at time of analysis.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two mandatory conditions: (1) The attacker must authenticate as a user with high-privilege (administrator) role in Squidex - this is the critical gating factor that restricts exploitation to insider threats or accounts compromised through credential theft or social engineering. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 5.5 with PR:H (high privilege required) indicates moderate severity with a critical gating factor: only authenticated administrators can exploit this. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with compromised or insider admin credentials authenticates to Squidex and accesses the Restore API endpoint. They craft a malicious request with the `Url` parameter set to `file:///etc/passwd` (or another sensitive local file). … |
| Remediation | Upgrade Squidex to version 7.23.0 or later immediately. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today