Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-04 00:13 UTC
Importiert: 2026-09-04 01:57 UTC
Quelle-ID: full_disc
uid_hash: 8e88ba3ec07243cc1c1d83a11befe2d633ce7bf8cbf66618058cb09c5753a280

Full Disclosure

Posted by Ron E on Sep 03 Description

Flextype CMS v1.0.0-alpha.3 contains a server-side request forgery (SSRF)

vulnerability in the expression-processing functionality exposed through

the /api/v1/query endpoint. An authenticated remote attacker can supply an

arbitrary URL to the exposed fetch() function, causing the Flextype server

to initiate an outbound HTTP request to an attacker-controlled destination.

The application does not sufficiently restrict the destination...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss