Threats tagged 'ghsa-rcmh-vfq7-8gf4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.4	EPSS 0.3%	CVE-2026-12992Io.apicurio:apicurio registry schema util wsdl: Apicurio Registry allows upload of WSDL raising HTTP request High7.4EPSS 0.3%2026-06-26GCVE DatabaseCVE-2026-12992 A Server-Side Request Forgery (SSRF) vulnerability exists in Apicurio Registry's WSDL processing when the VALIDITY rule is set to FULL. An attacker with Developer-role access can upload a crafted WSDL document containing malicious import locations, causing the registry to make HTTP requests to arbitrary internal URLs. This may allow bypassing access controls and potentially impact confidentiality, integrity, and availability. EPSS 0.3%Report on CVE-2026-12992 Vulnerability CWE-918 #ghsa-rcmh-vfq7-8gf4 #maven	GCVE Database	2026-06-26

Page 1 of 1