Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/18 3:32 p.m.9 views

GHSA-PF9C-CH8R-2958 Statamic CMS: Server-Side Request Forgery via Glide

Impact The Glide image proxy's URL validation could be bypassed using an IP representation that wasn't normalized before the public-IP check. An unauthenticated user could cause the server to make HTTP requests to internal addresses — including loopback, private network, and cloud metadata...

5.4CVSS5.8AI score0.00151EPSS
SaveExploits0References3
Rows per page
Query Builder