Threats tagged 'ghsa-56cv-c5p2-j2wg'

The SiYuan kernel contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/network/forwardProxy endpoint that allows authenticated users to make arbitrary HTTP requests from the server. The endpoint does not validate the destination URL beyond basic format checks, enabling requests to internal networks, localhost, or cloud metadata services. This can lead to internal network reconnaissance, cloud credential theft, data exfiltration, and firewall bypass. Versions prior to 3.6.0 are affected, with a fix available in version 3.6.0.