Threats tagged 'ghsa-v3p4-vhx3-fmh5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-119709Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata Medium6.92026-10-30GCVE DatabaseCVE-2026-119709 Grimoire versions before 1.0.0 have an unauthenticated server-side request forgery (SSRF) vulnerability in the /api/fetch-metadata POST endpoint. This flaw allows attackers to submit arbitrary URLs that the server fetches and parses without authentication, potentially exposing internal or cloud metadata information. The vulnerability has a CVSS score of 5.8, indicating medium severity. Report on CVE-2026-119709 Vulnerability CWE-918 #ghsa-v3p4-vhx3-fmh5	GCVE Database	2026-10-30

Page 1 of 1