Filtered by vendor Lhccong
Subscriptions
Filtered by product Fish-island-backend
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-111720 | 1 Lhccong | 1 Fish-island-backend | 2026-10-19 | 5.3 Medium |
| fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or cloud metadata endpoints through redirect-following OkHttp requests and read back page titles, meta descriptions and favicons. | ||||
Page 1 of 1.