{"cvss":0.0,"datePublished":"2026-03-31T00:00:00Z","dateUpdated":"2026-03-31T00:00:00Z","description":"Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.","dueDate":"","id":"CVE-2025-32355","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"TRUfusion Enterprise","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"rocketsoftware trufusion_enterprise Server-Side Request Forgery","vendor":"Rocket Software"}