Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:18 a.m.11 views

CVE-2025-23221

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security...

5.4CVSS6.7AI score0.00593EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/20 4:49 p.m.30 views

CVE-2025-23221 Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security...

5.4CVSS0.00593EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/20 4:49 p.m.12 views

CVE-2025-23221 Fedify has an Infinite loop and Blind SSRF found inside the Webfinger mechanism

Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security...

5.4CVSS6.5AI score
SaveExploits0References6
Rows per page
Query Builder