Threats tagged 'ghsa-pj83-6473-35pq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-59231ccyl13 Pentestify · Server-Side Request Forgery (SSRF) Medium5.3EPSS 0.4%2026-07-31CVE Database V5CVE-2026-59231 Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbitrary attacker-chosen destinations via unvalidated URLs stored in the finding images field or the report client_logo field, which the server-side headless browser fetches while rendering the report. EPSS 0.4%Vulnerability CWE-918 #ghsa-pj83-6473-35pq	CVE Database V5	2026-07-31

Page 1 of 1