Threats tagged 'ghsa-877c-6q9f-v4cw'

Forgejo versions through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contain a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated attackers to submit crafted OpenID identifier URLs to the /user/login/openid endpoint, causing the server to issue blind discovery GET requests to internal resources such as loopback addresses, cloud metadata services, and other internal network addresses. The vulnerability enables port scanning and probing of internal systems without authentication.