Security Advisory

CVE-2026-46556

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 20:34:23

Last updated 2026-07-22 14:50:37

Assigner GitHub_M

CVSS score 6.5

State PUBLISHED

Description

FlaskBB is a Forum Software written in Python using the micro framework Flask. Prior to version 2.2.1, a Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows any authenticated user to force the server to send HTTP requests to arbitrary internal endpoints, including cloud metadata services. This is a blind SSRF with confirmed internal port scanning and internal API triggering capabilities. Version 2.2.1 patches the issue.

← Browse all CVEs View on cve.org ↗