CVE-2025-11674 - CVE House

Status published Medium CVE-2025-11674

PiExtract｜SOOP-CLM - Server-Side Request Forgery

6.9 CVSS

Vulnerability Description

SOOP-CLM developed by PiExtract has a Server-Side Request Forgery vulnerability, allowing privileged remote attackers to read server files or probe internal network information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11674

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from PiExtract

View All →

CVE-2025-3011

PiExtract SOOP-CLM - SQL Injection

Critical 9.8

CVE-2025-11673

PiExtract ｜SOOP-CLM - Hidden Functionality

High 8.6

Affected Vendor

PiExtract

View all reports →

Affected Software

SOOP-CLM

Vulnerable Versions:

5.2, 5.3

Timeline

Official Publish: October 13th, 2025

Last Modified: October 14th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-918

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1213 Data from Information Repositories

Collection

T1005 Data from Local System