1 matches found
GHSA-PF9C-CH8R-2958 Statamic CMS: Server-Side Request Forgery via Glide
Impact The Glide image proxy's URL validation could be bypassed using an IP representation that wasn't normalized before the public-IP check. An unauthenticated user could cause the server to make HTTP requests to internal addresses — including loopback, private network, and cloud metadata...
5.4CVSS5.8AI score0.00151EPSS
SaveExploits0References3
20