Beveiligingsadvies

CVE-2026-28677

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 04:23:23

Laatst bijgewerkt 2026-03-06 16:07:38

Toegewezen door GitHub_M

CVSS-score 8.2

Status PUBLISHED

Beschrijving

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, the URL ingest pipeline accepted user-controlled remote URLs with incomplete destination restrictions. Although private/local host checks existed, missing restrictions for credentialed URLs, non-standard ports, and cross-host redirects left SSRF-class abuse paths in non-localhost deployments. This issue has been patched in version 1.6.3-alpha.

← Alle CVE's bekijken Bekijk op cve.org ↗