CVE-2025-67427

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-05 · updated 2026-06-17
Weakness: CWE-918

Description

A Blind Server-Side Request Forgery (SSRF) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to force the server to initiate an HTTP request via the "GET /images" API. The vulnerability occurs due to insufficient validation of the "src" query parameter, which permits arbitrary HTTP or HTTPS URIs, resulting in unexpected requests against internal and external networks.

Affected products

evershopcommerce evershop: through 2.1.0

References

https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2025-67427
https://github.com/evershopcommerce/evershop

Get alerted when CVE-2025-67427 or the next vulnerability affects your stack