EUVD-2025-29776

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Dragonfly preheat data can be corrupted by a Man in the Middle due to disabled Transport Layer Security verification in the Manager before 2.1.0, risking denial of service and data integrity.

Reporter	Title	Published	Views	Family All 54
CNNVD	Dragonfly 信任管理问题漏洞	17 Sep 202500:00	–	cnnvd
CVE	CVE-2025-59347	17 Sep 202519:23	–	cve
Cvelist	CVE-2025-59347 Dragonfly Manager makes requests to external endpoints with disabled TLS authentication	17 Sep 202519:23	–	cvelist
Github Security Blog	Dragonfly's manager makes requests to external endpoints with disabled TLS authentication	17 Sep 202519:28	–	github
GitLab Advisory Database	Dragonfly's manager makes requests to external endpoints with disabled TLS authentication	17 Sep 202500:00	–	gitlab
NVD	CVE-2025-59347	17 Sep 202520:15	–	nvd
OPENSUSE Linux	govulncheck-vulndb-0.0.20250924T192141-1.1 on GA media (moderate)	26 Sep 202500:00	–	opensuse
OSV	CVE-2025-59347 Dragonfly Manager makes requests to external endpoints with disabled TLS authentication	17 Sep 202519:23	–	osv
OSV	GHSA-98X5-JW98-6C97 Dragonfly's manager makes requests to external endpoints with disabled TLS authentication	17 Sep 202519:28	–	osv
OSV	GO-2025-3966 Dragonfly's manager makes requests to external endpoints with disabled TLS authentication in d7y.io/dragonfly	24 Sep 202519:21	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "587327d6-64a2-3481-82f9-b11d84f9989a",
        "vendor": {
          "name": "dragonflyoss"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7de0ac2a-d1b5-3901-82da-42a9bd338a89",
        "product": {
          "name": "Dragonfly"
        },
        "product_version": "< 2.1.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/dragonflyoss/dragonfly/security/advisories/GHSA-98x5-jw98-6c97
github	www.github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-59347
pkg	www.pkg.go.dev/vuln/GO-2025-3966

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 46.9

CVSS 3.16.5

EPSS0.0004

SSVC