CVE-2025-25182

Stroom (data processing/storage platform) contains an authentication bypass in versions 7.2-beta.53 and earlier, affecting deployments configured with AWS ALB in a way that the app is not accessed through the ALB. This bypass can enable server-side request forgery and may lead to code execution o...