This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 6.1.
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-13 05:00 UTC
- Importiert: 2026-10-21 14:15 UTC
- Quelle-ID:
zdi_pub - uid_hash:
822781d841df46bb5f0af4706b1c8475c3e0ba515198dc361ffc7b5197aee323
Inhalt
| No data |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| Zero Day Initiative (Published) | threat_intel | - | de | https://www.zerodayinitiative.com/rss/published/ |