References https://nvd.nist.gov/vuln/detail/CVE-2025-4673 https://github.com/golang/go/issues/73816 https://access.redhat.com/security/cve/cve-2025-4673 https://avd.aliyun.com/detail?id=AVD-2025-4673 https://cve.imfht.com/detail/CVE-2025-4673 https://explore.alas.aws.amazon.com/CVE-2025-4673.html https://github.com/advisories/GHSA-62jj-gr2r-5c34 https://security-tracker.debian.org/tracker/CVE-2025-4673 https://ubuntu.com/security/CVE-2025-4673 https://linux.oracle.com/cve/CVE-2025-4673.html
Related VulnerabilitiesPoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp ProxyPoCCVE-2026-20896: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication BypassPoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCELobeChat /webapi/proxy 服务器端请求伪造漏洞(CVE-2026-54157)东胜物流软件 /PriceCarrier/CrmProxyMailListHtmlGridSource.aspx SQL 注入漏洞关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告Apache Druid /proxy/coordinator@ 服务器端请求伪造漏洞(CVE-2025-27888)Gradio /proxy 服务器端请求伪造漏洞(CVE-2023-34239)PoCCVE-2025-62168: Squid Proxy - HTTP Authentication Credentials DisclosurePoClitellm-unauth-model-exposure: LiteLLM Proxy - Model ExposureArtica Proxy /images.listener.php 文件读取漏洞(CVE-2024-2053)PoCNginx Proxy Manager /api/tokens 默认口令漏洞PoCCVE-2025-62126: WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure