Posta before v0.18.0 SSRF via Webhook URL

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit rights to make the backend send POST requests to internal destinations by creating webhooks with arbitrary URLs. Attackers can target loopback, private-network or cloud metadata addresses and read delivery status codes and error strings to probe internal hosts and ports.

Etkilenen sürümler1 yazılım

Kaynaklar8 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/goposta/posta/pull/315 Yama
• github.com/…ommit/6bb376b55dcfdcb979040ed42c4bf57b99e4f46a Yama
• github.com/goposta/posta/issues/282 Üçüncü taraf
• vulncheck.com/…ories/posta-before-0.18.0-ssrf-via-webhook-url Üçüncü taraf
• github.com/goposta/posta/releases/tag/v0.18.0 Diğer
• github.com/…d05c73/internal/services/webhook/dispatcher.go Diğer

Kayıt geçmişi

1. 5 Kas 2026 21:16Yayımlandı

İlgili açıklar

• 8,6 CVE-2026-88981Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints
• 8,6 CVE-2026-88980Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator
• 5,8 CVE-2026-88979Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy
• 5,0 CVE-2026-88983Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
• 6,9 CVE-2026-81190KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF
• 4,8 CVE-2026-54442NationalSecurityAgency/emissary: Incomplete fix for CVE-2026-35571: SSRF