Skip to content
OpenAdvisories

Vendor

mhdzumair

1 known vulnerabilities.

Products

mediaflow-proxy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-100391

    MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validation

    MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and c…

    mhdzumair mediaflow-proxy