CVE-2025-32355
HIGH 7.3Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.
Affected Applications in Environment
6
Rufus
v4.11.2285
5 devices
Rufus
v4.9.2256
1 device
Rufus
v4.13.2316
8 devices
Rufus
v4.5.2180
1 device
Rufus
v4.7.2231
1 device
Rufus
v4.6.2208
2 devices
Affected Devices
13
BRAXTONCOMPUTER
Windows
DESKTOP-1OVQ2S7
Windows
DPCUBC-9MYYYQ2
Windows
DPEECE-WILBUR
Windows
DPINFT-02609239
Windows
DPINFT-24679149
Windows
DPINFT-983F2T2
Windows
DPINFT-D145JJ7D
Windows
DPINFT-L1182PBW
Windows
FACWADE5680
Windows
LIBGHOST
Windows
NCH-194817
Windows
SILK
Windows