Threats tagged 'ghsa-8rj6-jxxp-67pg'

A server-side request forgery (SSRF) vulnerability exists in Typecho up to version 1.3.0 within the Ping Back Service Endpoint. The vulnerability arises from improper handling of the X-Pingback/link argument in the Service::sendPingHandle function, allowing remote attackers to manipulate requests. Exploit code has been publicly disclosed. The vendor has not responded to the disclosure, and no patch or remediation guidance is currently available.