Threats tagged 'ghsa-8vfr-hg2j-ch26'

CVE-2026-72566 is a server-side request forgery (SSRF) vulnerability in the software 'automatisch' up to commit 41f3c56. It allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action. This vulnerability has a high severity score of 7.7 and impacts confidentiality without affecting integrity or availability.