Threats tagged 'ghsa-jrwq-3w4r-c27c'

Buku (bukuserver) versions through 5.1.1 have an unauthenticated server-side request forgery (SSRF) vulnerability. This flaw allows remote attackers to supply a URL parameter to specific API endpoints (/api/fetch_data or /api/network_handle) to make the server request internal hosts. The vulnerability enables attackers to access loopback, private, or cloud metadata IP addresses by bypassing weak URL validation and following redirects, potentially revealing internal service information such as page titles, descriptions, and keywords.