What is CVE-2025-60279?

CVE-2025-60279 is a critical-severity vulnerability in N/a, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.6/10. Published 2025-10-17.

How severe is CVE-2025-60279?

Critical severity. CVSS v3 base score is 9.6 out of 10.

SSRF in N/a

CVE-2025-60279

A server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4.8.5 allows authenticated users to send arbitrary requests to internal services via the API. An attacker can leverage this to enumerate open ports based on response discrepancies and interact with internal services.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2025-60279?: CVE-2025-60279 is a critical-severity vulnerability in N/a, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.6/10. Published 2025-10-17.
How severe is CVE-2025-60279?: Critical severity. CVSS v3 base score is 9.6 out of 10.