Threats tagged 'ghsa-29gq-28qv-vr5m'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.0	CVE-2026-118376WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies Medium6.02026-10-28GCVE DatabaseCVE-2026-118376 WeKnora versions prior to 0.8.2 have a server-side request forgery (SSRF) vulnerability in the isRestrictedIP() function. This flaw causes NAT64-prefixed IPv6 addresses to be misclassified as public, allowing authenticated attackers to supply URLs that resolve to internal addresses via web_fetch or URL-based knowledge import. This can enable attackers to access internal services or cloud metadata endpoints. Report on CVE-2026-118376 Vulnerability CWE-918 #ghsa-29gq-28qv-vr5m	GCVE Database	2026-10-28

Page 1 of 1