Skip to content
OpenAdvisories

Package · Debian

shaarli

10 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

    Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing t…