Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2025-27888 [Medium]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-27888.

CVSS: 5.8
Coverage Span: 2025-09-23
Reports: 1 related reports

Associated Reports & Timeline

CVE-2025-27888: Server-Side Request Forgery via URL Parsing Confusion in Apache Druid Proxy Endpoint

Recounts how XBOW turned knowledge of older CVEs into a new Apache Druid zero-day SSRF (CVE-2025-27888), triggered through a proxy endpoint and URL parsing confusion.