CVE-2026-61529

Prior to version 0.7.0 , Endatix , a self-hosted form and survey management platform, is vulnerable to a blind second-order Server-Side Request Forgery (SSRF) . The anonymous POST /forms/{formId}/submissions endpoint stores attacker-controlled JsonData without sufficient validation. When a staff ...