Skip to content
OpenAdvisories

Vendor

goposta

1 known vulnerabilities.

Products

posta 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-123204

    Posta before v0.18.0 SSRF via Webhook URL

    Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit rights to make the backend send POST requests to internal destinations by creating webhooks with arbitrary URLs. Attackers can target loopback,…

    goposta posta