CVE-2025-27501

creationtimestamp| type| source ---|---|--- 2025-03-03 19:31:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6268 2025-03-03 19:46:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114100218515671455 2025-03-03 21:24:32+00:00| seen|...

CVE-2025-27501 Server Side Request Forgery in Ziti Console

OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Controller and performs a server-side...

CVE-2025-27501 Server Side Request Forgery in Ziti Console

OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form of authentication. This endpoint accepts a user-supplied URL parameter to connect to an OpenZiti Controller and performs a server-side...