Threats tagged 'ghsa-4ghw-3mh4-pmh7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-123204Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit Medium5.32026-11-05GCVE DatabaseCVE-2026-123204 Posta versions prior to 0.18.0 have a server-side request forgery (SSRF) vulnerability that allows authenticated users with edit permissions to create webhooks with arbitrary URLs. This enables the backend to send POST requests to internal or cloud metadata endpoints. Attackers can use this to probe internal hosts and ports by reading delivery status codes and error messages. Report on CVE-2026-123204 Vulnerability CWE-918 #ghsa-4ghw-3mh4-pmh7	GCVE Database	2026-11-05

Page 1 of 1