Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/07/31 3:06 p.m.•30 views

EUVD-2026-51545

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

5.3CVSS6.1AI score0.0045EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/31 3:06 p.m.•21 views

CVE-2026-59231 Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

5.3CVSS6AI score0.0045EPSS
SaveExploits0References3
Mend
Mend
•added 2026/07/31 3:06 p.m.•11 views

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

6.4CVSS6AI score0.0045EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/07/31 3:06 p.m.•44 views

CVE-2026-59231 Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

5.3CVSS6AI score0.0045EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/31 3:06 p.m.•24 views

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

5.3CVSS6.1AI score0.0045EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/31 12:00 a.m.•8 views

CVE-2026-59231: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report clientlogo fiel...

5.3CVSS6.1AI score0.0045EPSS
SaveExploits0References2
Rows per page
Query Builder