11234 matches found
GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool
Summary An unauthenticated server-side request forgery vulnerability lets any anonymous user make the GeoNetwork server issue arbitrary outbound HTTP requests. This gives an external attacker a position inside the server's network, making it possible to make internal requests no matter if the...
GHSA-5HX7-J24V-RFFJ GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool
Summary An unauthenticated server-side request forgery vulnerability lets any anonymous user make the GeoNetwork server issue arbitrary outbound HTTP requests. This gives an external attacker a position inside the server's network, making it possible to make internal requests no matter if the...
CVE-2026-87999
Open WebUI (a self-hosted AI platform) had a server-side request forgery (SSRF) vulnerability in backend/open_webui/retrieval/web/utils.py, affecting the POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search endpoints. The root cause was that Python's globally routable ...
Server-side Request Forgery (SSRF)
Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the writepdf stylesheet and XMP metadata loading paths in weasyprint/document.py and weasyprint/pdf/init.py. An attacker can make the rendering process...
CVE-2026-19233
CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint...
CVE-2026-86771 Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
Snipe-IT versions before 8.7.0 fail to HTML-escape the employeenum field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employeenum value containing an img tag with an arbitrary HTT...
CVE-2026-86771 Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
Snipe-IT versions before 8.7.0 fail to HTML-escape the employeenum field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employeenum value containing an img tag with an arbitrary HTT...
EUVD-2026-74948
Snipe-IT versions before 8.7.0 fail to HTML-escape the employeenum field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML function. Attackers can craft a malicious employeenum value containing an img tag with an arbitrary HTT...
CVE-2026-87821
Lara Dashboard versions 0.9.2 through 1.3.1 are affected by a Server-Side Request Forgery (SSRF) in the POST /api/admin/builder/markdown/fetch endpoint. Any authenticated user can supply a malicious URL without host validation or redirect restrictions , allowing them to read the response body of ...
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...
CVE-2026-79635
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-54048
Apache Impala versions 2.0.0 through 4.5.1 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists because specifying tblproperties('avro.schema.url'=' http://...') or a file:/// URI on a table allows an attacker to trigger a GET request to internal endpoints that the Impala serv...
CVE-2026-19733
CVE-2026-19733 is a Server-Side Request Forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting's Library Information and Document Automation Program , affecting versions before v22.2 . The vulnerability allows an unauthenticated remote attacker to forge server-side requests, res...
CVE-2026-80123
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...
CVE-2026-80123
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...
CVE-2026-87084
Tanium addressed a server-side request forgery vulnerability in Enforce...
EUVD-2026-74561
Tanium addressed a server-side request forgery vulnerability in Enforce...
CVE-2026-87084
Tanium Enforce is affected by a server-side request forgery (SSRF) vulnerability, rated 7.7 (HIGH) by Tanium's CVSS v3.1 assessment (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). The vulnerability allows a network-based attacker with low privileges to exploit the flaw without user interaction, resulting ...