CVE-2025-3026

Description

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. Not tested in higher versions. By modifying the ‘Host’ header in an HTTP request, it is possible to manipulate the generated links and thus redirect the client to a different base URL. In this way, an attacker could insert his own server for the client to send HTTP requests, provided he succeeds in exploiting it.

Reserved 2025-03-31 | Published 2025-03-31 | Updated 2025-03-31 | Assigner INCIBE

Problem types

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Product status

Default status
unaffected

8.0
affected

Credits

Julen Garrido Estévez finder

References

www.incibe.es/...otices/aviso/multiple-vulnerabilities-ejbca

cve.org (CVE-2025-3026)

nvd.nist.gov (CVE-2025-3026)

Download JSON