Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2026/06/15 9:30 p.m.•12 views

GHSA-P85R-X2WJ-MXQJ shlink has a Server-Side Request Forgery issue

A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...

9.1CVSS5.8AI score0.00404EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/15 9:30 p.m.•25 views

EUVD-2026-36785

A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...

5.8AI score0.00404EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/15 9:30 p.m.•6 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the automatic short URL title resolution process. An attacker can access internal network resources by supplying a crafted longUrl parameter. Remediation There is no fixed version for shlinkio/shlink...

9.3CVSS5.8AI score0.00404EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/15 9:30 p.m.•15 views

shlink has a Server-Side Request Forgery issue

A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...

9.1CVSS5.8AI score0.00404EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•8 views

CVE-2026-50887: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...

9.1CVSS5.8AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•54 views

PT-2026-49328

Name of the Vulnerable Software and Affected Versions shlink version 5.0.1 Description A Server-Side Request Forgery SSRF exists in the automatic short URL title resolution component. This allows attackers to scan internal resources by providing a crafted longUrl variable. Recommendations At the...

9.1CVSS5.8AI score0.00404EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/15 12:00 a.m.•46 views

CVE-2026-50887

A Server-Side Request Forgery SSRF in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl...

0.00404EPSS
SaveExploits0References1
Rows per page
Query Builder