Skip to content
OpenAdvisories

Vendor

shaarli

8 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 2.7

    Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route

    Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing t…