CVE-2025-10695
OpenSupports 4.11.0
- Class
- SSRF
- Severity
- Medium · CVSS 4.0 score 6.9
- Disclosed
- Credit
- Cristian Vargas, Fluid Attacks Offensive Team
- Code name
- freer
- Affected
- OpenSupports 4.11.0
The defect
Unauthenticated SSRF (test-imap/test-smtp)
Class overview · SSRF
The server is asked to fetch a URL the attacker chooses. The request comes from inside the service's own network position, reaching things the attacker cannot reach directly: internal endpoints, cloud metadata or unauthenticated services.