Skip to content
OpenAdvisories

Product · getfider

fider

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

    Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fi…