Threats tagged 'ghsa-vw2v-vqm8-9f9g'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-36756Server-Side Request Forgery (SSRF) Medium5.42026-04-30GCVE DatabaseCVE-2026-36756 A Server-Side Request Forgery (SSRF) vulnerability exists in the /plugins/-/install-from-uri endpoint of halo version 2.22.14. This flaw allows authenticated attackers to perform internal network scans by sending crafted GET requests to the vulnerable endpoint. The vulnerability has a medium severity rating with a CVSS score of 5.4. Report on CVE-2026-36756 Vulnerability CWE-918 #ghsa-vw2v-vqm8-9f9g	GCVE Database	2026-04-30

Page 1 of 1