PT-2025-35709

CVE-2025-9821

Published

2025-09-03

Updated

2025-09-03

Description by

CVSS 3.1

2.7

Low

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions not specified

Description Users with webhook permissions can conduct Server-Side Request Forgery (SSRF) via webhooks. If they have permission to view the webhook logs, the partial request response is also disclosed. This allows bypassing firewalls to interact with internal services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration