High severity8.8NVD Advisory· Published Aug 15, 2025· Updated Jun 17, 2026

CVE-2025-8675

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This issue affects AI SEO Link Advisor: from 0.0.0 before 1.0.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AI Seo Link Advisor Project/AI Seo Link Advisor
cpe:2.3:a:ai_seo_link_advisor_project:ai_seo_link_advisor:*:*:*:*:*:drupal:*:*
Range: <1.0.6
Drupal/AI SEO Link Advisorllm-fuzzy2 versions
<1.0.6+ 1 more
- (no CPE)range: <1.0.6
- (no CPE)range: 0.0.0

Patches

Vulnerability mechanics

References

www.drupal.org/sa-contrib-2025-095nvdThird Party Advisory

News mentions

No linked articles in our index yet.

Severity

HighCVSS v3.1

8.8/ 10

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Probability of exploitation in the next 30 days.

0.25%

VYPR risk score

Composite of severity, exploitation, and reach.

0.57high

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Weaknesses

CWE-918
Server-Side Request Forgery (SSRF)

CVE ID

CVE-2025-8675

Credits

AC
Alberto Cocchiara (bigbabert)
finder
CL
Conrad Lara (cmlara)
finder
BF
Benji Fisher (benjifisher)
coordinator
DM
Damien McKenna (damienmckenna)
coordinator
GK
Greg Knaddison (greggles)
coordinator
C(
catch (catch)
coordinator
AC
Alberto Cocchiara (bigbabert)
remediation developer
CL
Conrad Lara (cmlara)
remediation developer
VK
Vishal Kadam (vishal.kadam)
remediation developer