Threats tagged 'ghsa-wmfw-2xfp-7mvx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-124442AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows users with station WebHooks High7.12026-11-08GCVE DatabaseCVE-2026-124442 AzuraCast versions before 0.24.0 have a server-side request forgery (SSRF) vulnerability that allows users with station WebHooks permission to bypass the UserUrlFilter SSRF protection via HTTP redirects. This enables attackers to configure certain webhooks (Mastodon, Telegram, GroupMe, RadioReg) to point to redirecting URLs, causing internal services to be accessed and their responses exposed in test logs. Report on CVE-2026-124442 Vulnerability CWE-918 #ghsa-wmfw-2xfp-7mvx	GCVE Database	2026-11-08

Page 1 of 1