Beveiligingsadvies

CVE-2026-28680

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 04:26:51

Laatst bijgewerkt 2026-03-06 16:07:29

Toegewezen door GitHub_M

CVSS-score 9.3

Status PUBLISHED

Beschrijving

Ghostfolio is an open source wealth management software. Prior to version 2.245.0, an attacker can exploit the manual asset import feature to perform a full-read SSRF, allowing them to exfiltrate sensitive cloud metadata (IMDS) or probe internal network services. This issue has been patched in version 2.245.0.

← Alle CVE's bekijken Bekijk op cve.org ↗