Skip to content
OpenAdvisories

Vendor

lin-snow

20 known vulnerabilities.

Products

Ech0 20
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-35037 Public exploit Scanner template

    Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata

    Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/title endpoint accepts an arbitrary URL via the website_url query parameter and makes a server-side HTTP request to it without any validati…

    lin-snow Ech0 github.com/lin-snow/Ech0 Go