Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-77112 EUVD-2026-85263GHSA-67g7-2fhw-xc33

SSRF Leading to JWT Token Disclosure in Global IT Informatics' Weoll

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by TR-CERT

Vendor: Global IT Informatics Technology Services Product: Weoll

Description

Server-Side request forgery (SSRF) vulnerability in Global IT Informatics Technology Services Inc. Weoll allows Server Side Request Forgery.

This issue affects Weoll: before 3.2.45.44.

Affected products

VendorProductAffectedFixed
Global IT Informatics Technology Services Weoll < 3.2.45.44 3.2.45.44

References