Server-Side Request Forgery Vulnerability in Intera InHire by Intera Group

CVE-2025-6142

What is CVE-2025-6142?

A vulnerability exists in Intera InHire versions up to 20250530, where improper handling of an argument allows remote attackers to execute server-side request forgery (SSRF) attacks. This flaw can be exploited through manipulated HTTP requests, potentially leading to unauthorized access to sensitive internal resources. Despite early notification to the vendor regarding the vulnerability, there has been no response or resolution provided. This lack of communication raises concerns about the security measures in place and the urgency for users to address the risk.

References