Security Advisory

CVE-2026-48555

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-29 18:30:27

Last updated 2026-07-28 01:49:31

Assigner VulnCheck

CVSS score 5.3

State PUBLISHED

Description

Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php.

← Browse all CVEs View on cve.org ↗