CVE-2026-4528

A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/httpproxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation ...

CVE-2026-4528

creationtimestamp| type| source ---|---|--- 2026-03-22 00:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhmaokszeh2o 2026-03-22 01:42:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhmg6tppmc2m...

CVE-2026-4528 trueleaf ApiFlow URL Validation http_proxy.service.ts validateUrlSecurity server-side request forgery

A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/httpproxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation ...