FinalDestination hostname matching allows SSRF protection bypass_CVE-2025-68662

7.6 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Description

Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, a hostname validation issue in FinalDestination could allow bypassing SSRF protections under certain conditions. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. No known workarounds are available.

Basic Information

ID CVE-2025-68662

Source GitHub_M

Published Jan 28, 2026 at 19:12

Modified Jan 28, 2026 at 20:21

Affected Product

Vendor discourse

Product discourse

Version < 3.5.4

Affected Versions discourse discourse < 3.5.4
discourse discourse >= 2025.11.0-latest, < 2025.11.2
discourse discourse >= 2025.12.0-latest, < 2025.12.1
discourse discourse >= 2026.1.0-latest, < 2026.1.0

CWE Classification

CWE-918

References

github.com /discourse/discourse/security/advisories/GHSA-gcfp-rjfc-925c

{
    "lastseen": "",
    "description": "Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, a hostname validation issue in FinalDestination could allow bypassing SSRF protections under certain conditions. This issue is patched in versions 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0. No known workarounds are available.",
    "published": "2026-01-28T19:12:24.903Z",
    "modified": "2026-01-28T20:21:50.707Z",
    "type": "cve",
    "title": "FinalDestination hostname matching allows SSRF protection bypass",
    "source": "GitHub_M",
    "references": "https://github.com/discourse/discourse/security/advisories/GHSA-gcfp-rjfc-925c",
    "id": "CVE-2025-68662",
    "bulletinFamily": "",
    "cwe": [
        "CWE-918"
    ],
    "cvelist": null,
    "sourceData": "discourse discourse < 3.5.4\ndiscourse discourse >= 2025.11.0-latest, < 2025.11.2\ndiscourse discourse >= 2025.12.0-latest, < 2025.12.1\ndiscourse discourse >= 2026.1.0-latest, < 2026.1.0",
    "sourceHref": "",
    "cvss": {
        "score": 7.6,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "discourse",
    "version": "< 3.5.4",
    "vendor": "discourse",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}