Description
A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. Performing a manipulation results in server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dfm | feedfinder2 | 0.0.1, 0.0.2, 0.0.3, 0.0.4 | — |
References
- VDB-428026 | dfm feedfinder2 feedfinder2.py find_feeds server-side request forgery vdb-entry technical-description
- VDB-428026 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-118586 | CVE Analysis and Report third-party-advisory
- Submit #1026092 | dfm feedfinder2 0.0.4 Server-Side Request Forgery third-party-advisory
- https://github.com/dfm/feedfinder2/issues/16 issue-tracking
- https://github.com/dfm/feedfinder2/ product