Threats tagged 'ghsa-xxfv-g3w7-h5pg'

Zyplayer-Doc versions up to and including 1.0.0 contain a Server-Side Request Forgery (SSRF) vulnerability in the WikiPageWebService.download() function. This vulnerability allows an attacker to induce the server to make unintended requests, potentially leading to unauthorized access to internal resources. The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.