Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/05/27 5:59 p.m.17 views

Strapi allows Server-Side Request Forgery in Webhook function

Description In Strapi latest version, at function Settings - Webhooks, the application allows us to input a URL in order to create a Webook connection. However, we can input into this field the local domains such as localhost, 127.0.0.1, 0.0.0.0,.... in order to make the Application fetching into...

7.5CVSS6.5AI score0.00483EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder