#cwe-918

共收录 2015 条相关情报。

漏洞预警2026-08-20 发布INFO

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in ...

CVE-2026-72846

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.

CVE-2026-69855

Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

CVE-2026-69851

Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network.

CVE-2026-69543

Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

CVE-2026-66800

Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-65801

Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect following in importGoogleList() and importNaverList() in serve...

CVE-2026-54508

TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect follo

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-08-20 发布INFO

langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

CVE-2026-72848

SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-08-20 发布INFO

Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

CVE-2026-72846

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-08-20 发布INFO

TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution

CVE-2026-54508

TREK is a collaborative travel planner. Prior to 3.1.0, TREK validates only the initial URL before native redirect follo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-08-20 发布INFO

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 unt...

CVE-2026-71428

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, suc

历史摘要 · 未重新核验 · NVD

#cve #cwe-601 #cwe-918

漏洞预警2026-08-20 发布INFO

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob i...

CVE-2026-65842

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while con

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, al...

CVE-2026-61704

Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-08-20 发布INFO

Plate: SSRF with response disclosure in DOCX image embedding

CVE-2026-65842

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while con

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-08-20 发布INFO

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can cause the InLong Manager server to make outbound HTTP req...

CVE-2026-63044

Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role required) can

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make the server request arbitrary internal HTTP endpoints, clou...

CVE-2026-64968

ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP cli...

CVE-2026-77085

n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent r

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynam...

CVE-2026-77069

n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any address validation, and the file imports no validation helper. ...

CVE-2026-77067

The setWebhookResolver in packages/api/src/resolvers/webhooks/index.ts stores the caller-supplied url without any addres

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-08-20 发布INFO

The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to axios.get(url, rssParserConfig()) with no address validatio...

CVE-2026-77066

The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to ax

历史摘要 · 未重新核验 · NVD

#cve #cwe-918