Threats tagged 'ghsa-4vj3-p3vv-p25q'

YesWiki versions prior to 4.7.0 have a server-side request forgery (SSRF) vulnerability in the DuplicationManager::downloadFile() function. This flaw allows authenticated administrators to send arbitrary outbound requests by manipulating the files array. Exploitation can lead to attackers posting file:// or internal URLs to the /api/pages/{tag}/duplicate endpoint, resulting in local files, cloud metadata, or database credentials being stored in a publicly accessible directory.