CVE-2025-27632

Description

A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, including defacing the site content through web-cache poisoning.

Reserved 2025-03-04 | Published 2025-03-25 | Updated 2025-03-25 | Assigner Hitachi Energy

Problem types

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Product status

Default status
unaffected

6.2
affected

6.3
affected

References

publisher.hitachienergy.com/...DocumentPartId=&Action=Launch vendor-advisory

cve.org (CVE-2025-27632)

nvd.nist.gov (CVE-2025-27632)

Download JSON