{"cve":"CVE-2023-25753","nvd":{"published":"2023-10-19T09:15:08.480","modified":"2026-06-17T05:41:53.590","status":"Modified","description":"There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter.\n\nOf particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing.\n\nThis issue affects Apache ShenYu: 2.5.1.\n\nUpgrade to Apache ShenYu 2.6.0 or apply patch  https://github.com/apache/shenyu/pull/4776  .","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5},"cwes":["CWE-918"],"references":["https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977d","https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977d"],"products":["apache:shenyu"],"source":"nvd","synced_at":"2026-10-19T21:40:11.519948003+00:00"},"epss":{"cve":"CVE-2023-25753","score":0.01137,"percentile":0.66565,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-7w8v-5fcq-pvqw","url":"https://osv.dev/vulnerability/GHSA-7w8v-5fcq-pvqw","summary":"Apache Shenyu Server Side Request Forgery vulnerability","modified":"2024-02-16T08:15:37.869704Z","packages":[{"ecosystem":"Maven","name":"org.apache.shenyu:shenyu-admin","purl":"pkg:maven/org.apache.shenyu/shenyu-admin","ranges":["<2.6.0"],"fixed":["2.6.0"]},{"ecosystem":"Maven","name":"org.apache.shenyu:shenyu-common","purl":"pkg:maven/org.apache.shenyu/shenyu-common","ranges":["<2.6.0"],"fixed":["2.6.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}