Threats tagged 'ghsa-q5c8-876p-62rr'

A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace. This flaw arises from insufficient validation of user-supplied URL and network parameters, allowing a remote attacker to induce the server to send requests to arbitrary internal or external resources. Exploitation could lead to unauthorized access to internal services, network reconnaissance, and disclosure of sensitive information.