Threats tagged 'ghsa-55w8-f34c-fr45'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-123207LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass Low2.32026-11-05GCVE DatabaseCVE-2026-123207 LibreTV versions before 2.21.2 have a server-side request forgery (SSRF) vulnerability that allows authenticated users to bypass upstream address checks. This is due to unpinned DNS resolution in the fetchWithSafeRedirects() function, enabling attackers controlling authoritative DNS to manipulate address resolution and access internal or cloud metadata endpoints via specific API paths. Report on CVE-2026-123207 Vulnerability CWE-367 #ghsa-55w8-f34c-fr45	GCVE Database	2026-11-05

Page 1 of 1