PT-2026-145436

CVE-2026-65967

Published

2026-11-11

Updated

2026-11-11

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fider versions prior to 0.34.0

Description Insufficient validation of webhook URLs allows a Server-Side Request Forgery (SSRF), a flaw where a server is tricked into making requests to an unintended location. Attackers with administrative privileges can force the server to make arbitrary HTTP requests, which may lead to unauthorized access to internal network services or cloud metadata endpoints.

Recommendations Update to version 0.34.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Pratikkaran23

Vendors

Affected products

Weakness enumeration

CWE-918: Server-Side Request Forgery (SSRF)

Related identifiers