6 matches found
CVE-2026-125871
The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...
CVE-2026-125871
The sourcecache expansion module in MISP Modules (misp-modules) is vulnerable to a Server-Side Request Forgery (SSRF) and potential local file disclosure. The vulnerability occurs because the module fails to validate the target address when an authenticated user with permission to create or modif...
CVE-2026-125871 MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment
The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...
EUVD-2026-121039
The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...
CVE-2026-125871: MISP misp-modules: The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF)…
The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...
PT-2026-141612
The sourcecache expansion module in MISP Modules misp-modules contains a Server-Side Request Forgery SSRF vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving...