Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/09 8:35 p.m.11 views

GHSA-M5R2-8P9X-HP5M Craft CMS Vulnerable to SSRF in GraphQL Asset Mutation via Alternative IP Notation

I observed a recent commit intended to mitigate Server-Side Request Forgery SSRF vulnerabilities. While the implemented defense mechanisms are an improvement, I have identified two methods to bypass these protections. This report details the first bypass method involving alternative IP notation,...

6.9CVSS5.6AI score0.00359EPSS
SaveExploits1References6
Rows per page
Query Builder