Skip to main content

Server-Side Request Forgery (SSRF) in astro

CVE-2025-64525

  • astro
Medium
6.5/10

Summary

Astro is a web framework. In Astro versions 2.16.0 prior to 5.15.5 and 6.0.0-alpha.0 which utilizeon-demand rendering, request headers `x-forwarded-proto` and `x-forwarded-port` are insecurely used, without sanitization, to build the URL. This has several consequences, the most important of which are: middleware-based protected route bypass (only via `x-forwarded-proto`), Denial-of-Service (DoS) via cache poisoning (if a CDN is present), Server-Side Request Forgery (only via `x-forwarded-proto`), URL pollution (potential Stored-Cross-Site-Scripting), if a CDN is present), and WAF bypass. Version 5.15.5 contains a patch.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-918 - Server-Side Request Forgery (SSRF)

Server-side request forgery (SSRF) is a weakness that allows an attacker to send an arbitrary request, making it appear that the request was sent by the server. This request may bypass a firewall that would normally prevent direct access to the URL. The impact of this vulnerability can vary from unauthorized access to files and sensitive information to remote code execution.

References

Advisory Timeline

  • Published