Beveiligingsadvies

CVE-2026-48555

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-29 18:30:27
Laatst bijgewerkt 2026-07-28 01:49:31
Toegewezen door VulnCheck
CVSS-score 7.4
Status PUBLISHED

Beschrijving

Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php.