CVE-2026-19678

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

CVE-2026-19678

A server-side request forgery (SSRF) vulnerability exists in the unauthenticated form service of onPhase Forms version 11.0.14 . An unauthenticated remote attacker can exploit this by providing an attacker-controlled URL to a publicly accessible form, potentially leading to the disclosure of sens...

CVE-2026-19678 Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

EUVD-2026-108562

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

CVE-2026-19678 Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

PT-2026-121732

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

OnPhase Forms server-side request forgery vulnerability

OnPhase Forms version 11.0.14 contains a server-side request forgery vulnerability. This vulnerability stems from unauthenticated form services being susceptible to server-side request forgery, potentially allowing unauthenticated remote attackers to access sensitive internal Apache Solr data by...

OnPhase Forms authorization issue vulnerability

OnPhase Forms version 11.0.14 contains an authorization vulnerability stemming from a public registration form that allows authentication bypass. Unauthenticated remote attackers can manipulate registration parameters containing valid tenant names and existing user identifiers, thereby...