Kritik CVSS 10
CVE-2026-71495: CVE-2026-71495: sunucu taraflı istek sahteciliği (SSRF)
Açıklama (NVD)
Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler passes the attacker-controlled JSON url field directly to event.fetch() and returns the fetched response. This allows requests to internal services such as db:8090 and search:7700, cloud metadata addresses, and other network destinations, exposing returned data and permitting internal network reconnaissance or denial of service. This issue is fixed in version 0.20.0.
Özet bilgiler
- CVSS v3.1
- 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H - CWE
- CWE-918
- Yama
- Yok / bilinmiyor