Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/11 3:58 p.m.9 views

GHSA-87FV-VQQR-M4JR SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

Impact VolumeServer.FetchAndWriteNeedle fetches a caller-supplied remote endpoint and writes the response into a needle. Before 4.24 this RPC performed no authentication and no validation of the target, so anyone able to reach a volume server's gRPC port could coerce the server into issuing...

9.3CVSS5.7AI score0.00384EPSS
SaveExploits0References5
Rows per page
Query Builder