Beveiligingsadvies

CVE-2026-91750

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 00:35:42

Laatst bijgewerkt 2026-09-15 00:35:42

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.

← Alle CVE's bekijken Bekijk op cve.org ↗