What is GHSA-9gmg-hfch-x94j?

GHSA-9gmg-hfch-x94j is a security advisory published by GitHub Security Advisories with High severity. An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...

Which CVE IDs does GHSA-9gmg-hfch-x94j cover?

GHSA-9gmg-hfch-x94j covers the following CVE IDs: CVE-2025-25253. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9gmg-hfch-x94j?

GHSA-9gmg-hfch-x94j has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-9gmg-hfch-x94jHighCVSS 7.5

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...

Vendor

GitHub Security Advisories

Published

October 14, 2025

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-25253 →

📋 Description

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions ZTNA proxy may allow an unauthenticated attacker in a man-in-the middle position to intercept and tamper with connections to the ZTNA proxy

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-25253
https://fortiguard.fortinet.com/psirt/FG-IR-24-457
https://cert-portal.siemens.com/productcert/html/ssa-864900.html
https://github.com/advisories/GHSA-9gmg-hfch-x94j