Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/29 10:10 p.m.13 views

GHSA-6X26-5727-RRM9 Nezha's authenticated DDNS webhook configuration allows blind SSRF from the dashboard host

Summary An authenticated Nezha dashboard user can create or update a DDNS profile with provider webhook and configure an arbitrary webhookurl, HTTP method, request body, and headers. When DDNS is triggered for a server that uses that profile, the dashboard process sends the configured request wit...

6.4CVSS6AI score0.00182EPSS
SaveExploits0References3
Rows per page
Query Builder