TRUfusion Enterprise 认证绕过漏洞(CVE-2025-27223)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.rcesecurity.com/advisories/cve-2025-27223/
• https://www.cve.org/CVERecord?id=CVE-2025-27223
• https://access.redhat.com/security/cve/cve-2025-27223
• https://docs.rocketsoftware.com/bundle/trufusion_security_71110/page/topics/kmr1771912821581.html
• https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/
• https://s4e.io/tools/trufusion-enterprise-authentication-bypass-cve-2025-27223
• https://www.kodemsecurity.com/cve-database/cve-2025-27223
• https://vuldb.com/?id.330179
• https://github.com/advisories/GHSA-x7xc-36fh-7mvr
• https://docs.rocketsoftware.com/bundle/trufusion_rn_71031/page/kwg1743156415157.html

Related Vulnerabilities

• PoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File Upload
• TRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞（CVE-2025-27223）
• 智能环保云平台 /Enterprise/CreateCode_Simple SQL 注入漏洞
• PoCTRUfusion Enterprise /trufusionPortal/getCobrandingData 文件读取漏洞（CVE-2025-27222）
• PoCCVE-2025-32355: Rocket TRUfusion Enterprise - Server Side Request Forgery
• PoC安科瑞-智能环保云平台 /MainMonitor/GetEnterpriseInfoMapByDate/GetDates SQL 注入漏洞
• Elastic Cloud Enterprise 访问控制不当漏洞 可导致权限提升
• TRUfusion Enterprise 目录遍历漏洞(CVE-2025-27222)
• TRUfusion Enterprise 未授权访问漏洞(CVE-2025-27225)
• 安科瑞-GetEnterpriseInfoMapHM-SQL注入
• Kingdee Cloud-Starry-Sky Enterprise Edition 路径遍历漏洞