PT-2025-27002

🗓️ 26 Jun 2025 00:00:00Reported by Positive TechnologiesType

Octo-STS prior to v0.5.3 has SSRF vulnerability allowing data leakage through malicious tokens

Reporter	Title	Published	Views	Family All 492
GithubExploit	Exploit for Incorrect Default Permissions in Rapid7 Velociraptor	5 May 202619:48	–	githubexploit
GithubExploit	Exploit for Path Traversal in Ctfer-Io Chall-Manager	22 Aug 202512:37	–	githubexploit
GithubExploit	Exploit for Session Fixation in Ollama	24 Dec 202521:25	–	githubexploit
AlpineLinux	CVE-2025-52894	25 Jun 202516:59	–	alpinelinux
BDU FSTEC	The vulnerability of the Command Execution function in the file manager for managing files and directories in the File Browser allows a hacker to gain access to read and modify files.	4 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web manager for managing files and directories in File Browser, related to the use of default user accounts, allows a perpetrator to execute a brute-force attack.	4 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the organizational security access program for Kubernetes clusters, Teleport, is related to deficiencies in the authentication mechanism. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	17 Nov 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web manager responsible for managing files and directories in File Browser, related to bypassing authentication due to a bug in its original implementation, allows an intruder to gain unauthorized access to protected information.	6 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Chall-Manager software, related to unlimited resource distribution, allows a perpetrator to cause a service failure.	9 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the server.auth.getAuthorizationToken() function in the Ollama system for running and managing large language models (LLMs) allows a hacker to bypass existing security mechanisms.	8 Jun 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2025-52477
suse	www.suse.com/security/cve/CVE-2025-6023
suse	www.suse.com/security/cve/CVE-2025-53633
suse	www.suse.com/security/cve/CVE-2025-53634
suse	www.suse.com/security/cve/CVE-2025-52900
suse	www.suse.com/security/cve/CVE-2025-52904
github	www.github.com/octo-sts/app/commit/b3976e39bd8c8c217c0670747d34a4499043da92
suse	www.suse.com/security/cve/CVE-2025-52903
suse	www.suse.com/security/cve/CVE-2025-53547
osv	www.osv.dev/vulnerability/GHSA-h3qp-hwvr-9xcq

04 Aug 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.9 - 9.8

CVSS 48.8

EPSS0.15248

SSVC