CERT24GHSA-fcvr-25qj-4jg8: YesWiki server-side request forgery vulnerabilityLoading data…

GHSA-fcvr-25qj-4jg8: YesWiki server-side request forgery vulnerability

YesWiki versions before 4.7.0 contain a server-side request forgery (SSRF) vulnerability in the Bazar CSV import function copyUrlToLocalFile(). Authenticated administrators can make arbitrary outbound requests using crafted URLs.

← Back to intelligence

GHSA-fcvr-25qj-4jg8: YesWiki server-side request forgery vulnerability

YesWiki versions before 4.7.0 contain a server-side request forgery (SSRF) vulnerability in the Bazar CSV import function copyUrlToLocalFile(). Authenticated administrators can make arbitrary outbound requests using crafted URLs.