CVE-2025-65958: Web Main Py Cwe 918 Cve 2025 65958

Insufficient URL scheme validation and incomplete SSRF filtering. Checking domains against blocklists merely by string matching without DNS resolution misses underlying IPs and allows DNS rebinding.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0

Python

greprules fetch cve-2025-65958-web-main-py-cwe-918-cve-2025-65958 --engine opengrep

Description

Insufficient URL scheme validation and incomplete SSRF filtering. Checking domains against blocklists merely by string matching without DNS resolution misses underlying IPs and allows DNS rebinding.

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 1.6K downloads
0 direct1.6K via packs
· 0 stars · Quality score 61How quality works
Included packs: 2 packs

Community feedback

0 rule-level signals from signed-in users.

Useful reports: 0
Context false positives: 0
Metadata suggestions: 0

Contextual precision

Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.

Findings observed: 0
Projects: 0
Reporters: 0

Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.

Finding verdicts0

No approved finding verdicts yet.

Scan diagnostics0

No scan diagnostics reported yet.