Skip to content
OpenAdvisories

Vendor

getfider

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.4

    Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

    Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fi…