CVE-2025-44043

Keyoti SearchUnit prior to 9.0.0. is vulnerable to Server-Side Request Forgery (SSRF) in /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetResults and /Keyoti_SearchEngine_Web_Common/SearchService.svc/GetLocationAndContentCategories. An attacker can specify their own SMB server as the indexDirectory value when making POST requests to the affected components. In doing so an attacker can get the SearchUnit server to read and write configuration and log files from/to the attackers server.

• CWE-918

• https://keyoti.com/products/search/dotNetWeb/HtmlHelp9/?topic=UserGuide/Release%20Notes.htm
• https://www.sprocketsecurity.com/blog/cve-alert-cve-2025-44043-cve-2025-44044-the-search-bar-hacks-arent-dead-yet

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4403The Drag and Drop Multiple File Upload for WooCommerce plugi…9.8
• CVE-2025-44033SQL injection vulnerability in oa_system oasys v.1.1 allows …9.8
• CVE-2025-44034SQL injection vulnerability in oa_system oasys v.1.1 allows …8
• CVE-2025-44039CP-XR-DE21-S -4G Router Firmware version 1.031.022 was disco…5.1
• CVE-2025-4404A privilege escalation from host to domain vulnerability was…9.1
• CVE-2025-44040An issue in OrangeHRM v.5.7 allows an attacker to escalate p…7.2
• CVE-2025-44044Keyoti SearchUnit prior to 9.0.0. is vulnerable to XML Exter…7.5
• CVE-2025-4405The Hot Random Image plugin for WordPress is vulnerable to S…5.4
• CVE-2025-4406The wpForo Forum plugin for WordPress is vulnerable to Store…5.4
• CVE-2025-4407Insufficient Session Expiration vulnerability in ABB Lite Pa…6.8
• CVE-2025-44071SeaCMS v13.3 was discovered to contain a remote code executi…9.8
• CVE-2025-44072SeaCMS v13.3 was discovered to contain a SQL injection vulne…9.8