Threats Tagged 'ghsa-hv4c-3wcw-pxh2'
View all threats tagged with 'ghsa-hv4c-3wcw-pxh2'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-hv4c-3wcw-pxh2'
Click on any threat for detailed analysis and mitigation recommendations
0 AIL Framework versions before 7.0 contain a server-side request forgery (SSRF) vulnerability in the crawler submission feature. Authenticated users with low privileges can submit arbitrary URLs for crawling without sufficient validation, allowing requests to internal or restricted network addresses. This includes localhost, private IP ranges, link-local addresses, and cloud metadata services. The vulnerability enables attackers to use the server as a pivot to access internal services and retrieve sensitive data such as HTML content, screenshots, and HAR data. A patch has been introduced to validate and reject URLs resolving to non-global IP addresses, mitigating this risk. Join the discussion | CVE Database V5 | 08/19/2026, 08:53:13 UTC Added: 08/19/2026, 09:04:52 UTC |
Showing 1 to 1 of 1 result