Beveiligingsadvies

CVE-2026-90769

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 10:45:40

Laatst bijgewerkt 2026-09-14 15:36:18

Toegewezen door VulnCheck

CVSS-score 8.3

Status PUBLISHED

Beschrijving

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.

← Alle CVE's bekijken Bekijk op cve.org ↗