CVE-2025-27632

Name of the Vulnerable Software and Affected Versions TRMTracker versions up to 6.2.04/6.3.01

Description A Host Header Injection issue may allow an attacker to modify the host header value in an HTTP request, potentially leveraging multiple attack vectors, including defacing site content through web-cache poisoning.

Recommendations For TRMTracker versions up to 6.2.04/6.3.01, consider restricting access to the HTTP request host header to minimize the risk of exploitation. As a temporary workaround, avoid using the host header in HTTP requests to the TRMTracker application until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.