https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T20:29:21.005900+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-104441 fkie_cve-2026-104441 2026-10-03T20:29:21.040248+00:00

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the {{valeur}} action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.php to probe internal HTTP services and read back response content matching fiche markup.

 https://vulnerability.circl.lu/vuln/ghsa-9396-2vxw-5hf3 GHSA-9396-2vxw-5hf3 2026-10-03T20:29:21.040366+00:00

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the {{valeur}} action's url parameter. Attackers can submit the action through the content parameter of handlers/page/render.php to probe internal HTTP services and read back response content matching fiche markup.