CVE-2026-91081 in Docs信息

摘要

由 VulDB • 2026-09-14

Docs 5.6.1及更早版本在 cors-proxy 端点中存在服务器端请求伪造（SSRF）漏洞，允许匿名攻击者通过提供公共文档 UUID 发起出站请求。攻击者可利用 DNS check-then-use 竞态条件以及共享地址空间绕过技术访问内部网络资源并窃取图像内容。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

预定

披露

管理

条目

CPE

CWE

CWE-918 (已确认)

CVSS

EPSS

KEV

活动

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-91081
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-91081
CVE Details	https://www.cvedetails.com/cve/CVE-2026-91081/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!