GHSA-34PJ-2622-JVXQ @apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header

Summary When prettyUrls: true is enabled on @apostrophecms/file a documented SEO feature for serving uploaded files at clean URLs, the public pretty-URL handler builds the upstream URL using the raw Host HTTP request header: js proxyUrl = $req.protocol://$req.get'host'$uglyUrl That URL is then...

Remote Code Execution (RCE)

apostrophe is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of input via the component uploadfs allowing an attacker to inject maliciously crafted script into the system...

PT-2022-18999

Name of the Vulnerable Software and Affected Versions Apostrophe version 3.16.1 Description A remote code execution issue was discovered in the component uploadfs, allowing for potential exploitation. Recommendations For Apostrophe version 3.16.1, update to a version that fixes the remote code...