Beveiligingsadvies

CVE-2025-64522

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-10 22:11:18

Laatst bijgewerkt 2025-11-12 20:13:12

Toegewezen door GitHub_M

CVSS-score 9.1

Status PUBLISHED

Beschrijving

Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1 fixes the vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗