| शीर्षक | Shaarli <= 0.16.3 Server-Side Request Forgery |
|---|
| विवरण | Shaarli versions up to and including 0.16.3 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the /admin/metadata endpoint.
The endpoint accepts a user-controlled URL and performs a server-side request via cURL without validating the resolved destination IP address. As a result, loopback, RFC1918, link-local, and cloud metadata addresses can be reached.
Redirects are also followed automatically without re-validating the redirected destination.
The endpoint returns fetched metadata such as the remote page title, description, and keywords as JSON, allowing an attacker to retrieve information from otherwise inaccessible internal HTTP services.
The issue may be exploitable by an authenticated attacker, or without authentication when security.open_shaarli=true.
The vulnerability was publicly disclosed by the Shaarli maintainers on July 31, 2026 and fixed in version 0.16.4.
CWE: CWE-918 — Server-Side Request Forgery |
|---|
| स्रोत | ⚠️ https://github.com/shaarli/Shaarli/security/advisories/GHSA-85jx-fhrf-q9w7 |
|---|
| उपयोगकर्ता | akiner (UID 101157) |
|---|
| सबमिशन | 11/09/2026 11:55 AM (24 दिन पहले) |
|---|
| संयम | 04/10/2026 11:54 PM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413464 [Shaarli तक 0.16.3 Admin Metadata Endpoint MetadataController.php MetadataController url अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|