PT-2026-71580
CVE-2026-66654
·
تاريخ النشر
2026-08-11
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
6.0
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Vehica Core versions prior to 1.0.105
Description
An authenticated attacker with subscriber-level access and above can perform Server-Side Request Forgery (SSRF), a technique that allows a web application to make requests to an unintended location. This can be used to query and modify information from internal services by making web requests to arbitrary locations originating from the application.
Recommendations
Update to a version newer than 1.0.104.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾