GHSA-C59P-WQ67-24WX Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify

Summary This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security mechanisms, and forcing the victim’s server into an infinite loop causing Denial of Service. Moreover,...

Infinite loop and Blind SSRF found inside the Webfinger mechanism in @fedify/fedify

Summary This vulnerability allows a user to maneuver the Webfinger mechanism to perform a GET request to any internal resource on any Host, Port, URL combination regardless of present security mechanisms, and forcing the victim’s server into an infinite loop causing Denial of Service. Moreover,...

PT-2025-4859

Name of the Vulnerable Software and Affected Versions Fedify versions prior to 1.0.14 Fedify versions prior to 1.1.11 Fedify versions prior to 1.2.11 Fedify versions prior to 1.3.4 Description This issue allows a user to manipulate the Webfinger mechanism, performing a GET request to any internal...