Threats tagged 'ghsa-77h5-29x8-rvxj'

A vulnerability in heym versions before 0.0.105 allows authenticated users to bypass server-side request forgery (SSRF) protections. This occurs because egress guards are not applied to integration services using credential-supplied base URLs, enabling attackers to access internal service responses by configuring credentials to point to loopback, private, or cloud-metadata addresses.