IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-01 11:16

MODIFIED

2026-06-01 11:16

EPSS (Prob. Exploit)

0.53%

Top 54.8%

DATA SOURCES:

NVD 🔗 2026-06-01 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 GITHUB 🔗 2026-10-29 OSV 🔗 2026-11-02

> DESCRIPTION

Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-918

> CWE DETAILED DESCRIPTIONS

CWE-918: Server-Side Request Forgery - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

> GITHUB SECURITY ADVISORY

GHSA-vqc2-c9jh-3jjv MODERATE

Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component

AFFECTED PACKAGES:

MAVEN / org.apache.fesod:fesod-sheet

< 2.0.2-incubating

Fixed in: 2.0.2-incubating

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRF

AFFECTED PACKAGES:

Unknown / Unknown

11 versions affected

ALIASES:

GHSA-vqc2-c9jh-3jjv

> HISTORIQUE DES MODIFICATIONS

Première apparition

01/06/2026 11:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-918: Server-Side Request Forgery (SSRF) - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure th...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

Total des modifications: 2 Dernière mise à jour: 6 days ago