Lucene search
+L

3 matches found

NVD
NVD
added 2026/08/12 3:18 p.m.12 views

CVE-2026-73264

Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated baseurl for the openaicompatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/id/connection, causing...

7.6CVSS0.00395EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/12 2:30 p.m.44 views

CVE-2026-73264 Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider

Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated baseurl for the openaicompatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/id/connection, causing...

7.6CVSS0.00395EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/12 2:30 p.m.11 views

CVE-2026-73264 Prowler: Server-Side Request Forgery (SSRF) in Lighthouse Provider

Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user with Lighthouse provider configuration access could supply an unvalidated baseurl for the openaicompatible provider through POST /api/v1/lighthouse/providers and POST /api/v1/lighthouse/providers/id/connection, causing...

7.6CVSS5.4AI score
SaveExploits0References9
Rows per page
Query Builder