Description
A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.
Medium · 6.5
CVE-2026-88403
EUVD-2026-84200GHSA-8mh8-4252-7w8q
A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal reso…
Published Sep 21, 2026 · Updated Sep 22, 2026 · Assigned by mitre