2 matches found
CVE-2026-80350
OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...
7.1CVSS0.00401EPSS
SaveExploits0References7
CVE-2026-80350: Server-Side Request Forgery (SSRF)
OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...
7.1CVSS5.7AI score0.00401EPSS
SaveExploits0References2
20