CVE-2025-1211

Summary

CVE-2025-1211 is a Server-side Request Forgery (SSRF) vulnerability affecting versions of the package hackney. This issue arises due to the URI built-in module and hackney's improper handling of URLs. When a malicious URL such as http://[email protected]/ is used, the URI function will parse the host as 127.0.0.1, while hackney will refer to it as 127.2.2.2. This vulnerability can be exploited when users rely on the URL function for host checking, potentially leading to unauthorized access or data leakage. Users are advised to upgrade to a patched version of hackney to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.