PT-2026-78877 · Aeternalabshq · Pullmd
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
AeternaLabsHQ PullMD version 3.2.0
Description
A server-side request forgery (SSRF) exists in the REST API Endpoint component. This occurs when the
url argument is manipulated within the '/api' endpoint, allowing a remote attacker to induce the server to make unauthorized requests.Recommendations
Update to version 3.3.0.
As a temporary mitigation, restrict access to the '/api' endpoint to minimize the risk of exploitation.
Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pullmd