CVE-2025-68696

Description

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Risk Information

Base Score

8.2

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Score

Exploitation Probability

0.061

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-68696 are fixed in Ruby-httparty 0.24.0	Windows
Vulnerabilities CVE-2025-68696 are fixed in Ruby-httparty for Linux 0.24.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234