Threats tagged 'ghsa-hwrh-8qfp-c4p6'

A server-side request forgery (SSRF) vulnerability exists in gabehf/Koito through version 0.3.2. This flaw allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the PATCH /apis/web/v1/album/{id}/image endpoint. The vulnerability has a high severity score of 7.7 and impacts confidentiality but not integrity or availability.