https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:56:14.310480+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25939 CVE-2021-25939 — ArangoDB - Blind SSRF when Downloading Foxx Service from URL 2026-10-07T14:56:14.327927+00:00

Affected: arangodb

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileged attacker to perform blind SSRF and send internal requests to localhost.