Skip to content
OpenAdvisories

Vendor

fr0tt

1 known vulnerabilities.

Products

benotes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-116224

    fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery

    A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of the file app/Http/Controllers/PostController.php of the component Bookmark Metadata Endpoint. The manipulation of the argument url leads to server-side reques…

    fr0tt benotes