CVE-2025-5005: SSRF in Lingdang CRM 8.6.5.0-8.6.5.4

Successful exploitation of CVE-2025-5005 allows an attacker to initiate arbitrary HTTP requests from the Lingdang CRM server. This can be leveraged to access internal services and resources that are not directly exposed to the internet. An attacker could potentially read sensitive data from internal systems, interact with internal APIs, or even perform actions on behalf of the CRM server. The SSRF vulnerability's impact extends beyond simple information disclosure; it can be a stepping stone for further attacks, such as internal reconnaissance and privilege escalation. The availability of a public exploit significantly increases the likelihood of exploitation, particularly given the vendor's lack of response to early disclosure attempts.

1. Reserved2025-05-20
2. Published2025-09-09
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-5005 is to upgrade Lingdang CRM to version 8.6.6 or later, which contains the fix. If upgrading immediately is not possible, consider implementing temporary workarounds. Restrict outbound network access from the CRM server using a Web Application Firewall (WAF) or proxy to limit the destinations the server can connect to. Validate and sanitize the 'corpurl' parameter on the server-side to prevent malicious input. Monitor access logs for unusual outbound requests originating from the CRM server, paying close attention to requests to internal IP addresses or unexpected domains. After upgrading, verify the fix by attempting to trigger the SSRF vulnerability with a known malicious 'corpurl' value; the request should be blocked or rejected.