https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:33:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08250 bdu:2023-08250 https://cve.radiocsirt.org/vuln/bdu:2023-08250 https://cve.radiocsirt.org/vuln/euvd-2026-191139 EUVD-2026-191139 https://cve.radiocsirt.org/vuln/euvd-2026-191139 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40033 <p>Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to conduct a Blind Server-Side Request Forgery (SSRF) attack or disclose any file on the server, even with a basic user account on any Flarum forum. By uploading a file containing a URL and spoofing the MIME type, an attacker can manipulate the application to execute unintended actions. The vulnerability is due to the behavior of the `intervention/image` package, which attempts to interpret the supplied file contents as a URL, which then fetches its contents. This allows an attacker to exploit the vulnerability to perform SSRF attacks, disclose local file contents, or conduct a blind oracle attack. This has been patched in Flarum version 1.8.0. Users are advised to upgrade. Users unable to upgrade may disable PHP&#39;s `allow_url_fopen` which will prevent the fetching of external files via URLs as a temporary workaround for the SSRF aspect of the vulnerability.</p> <p>Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to conduct a Blind Server-Side Request Forgery (SSRF) attack or disclose any file on the server, even with a basic user account on any Flarum forum. By uploading a file containing a URL and spoofing the MIME type, an attacker can manipulate the application to execute unintended actions. The vulnerability is due to the behavior of the `intervention/image` package, which attempts to interpret the supplied file contents as a URL, which then fetches its contents. This allows an attacker to exploit the vulnerability to perform SSRF attacks, disclose local file contents, or conduct a blind oracle attack. This has been patched in Flarum version 1.8.0. Users are advised to upgrade. Users unable to upgrade may disable PHP&#39;s `allow_url_fopen` which will prevent the fetching of external files via URLs as a temporary workaround for the SSRF aspect of the vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40033 https://cve.radiocsirt.org/vuln/ghsa-67c6-q4j4-hccg <p><strong>Affected:</strong> Packagist: flarum/core, Packagist: flarum/framework</p> <p>## Impact The Flarum forum software is affected by a vulnerability that allows an attacker to conduct a Blind SSRF attack or disclose any file on the server, even with a basic user account on any Flarum forum. By uploading a file containing a URL and spoofing the MIME type, an attacker can manipulate the application to execute unintended actions. The vulnerability is due to the behavior of the `intervention/image` package, which attempts to interpret the supplied file contents as a URL, which then fetches its contents. This allows an attacker to exploit the vulnerability to perform SSRF attacks, disclose local file contents, or conduct a blind oracle attack.</p> <p>### Patches This has been patched in Flarum **v1.8**.</p> <p>## Workarounds As a temporary workaround for the SSRF aspect of the vulnerability, one can disable PHP&#39;s `allow_url_fopen` which will prevent the fetching of external files via URLs.</p> <p>### Credits Adam Kues - [Assetnote](https://assetnote.io/)</p> <p><strong>Affected:</strong> Packagist: flarum/core, Packagist: flarum/framework</p> <p>## Impact The Flarum forum software is affected by a vulnerability that allows an attacker to conduct a Blind SSRF attack or disclose any file on the server, even with a basic user account on any Flarum forum. By uploading a file containing a URL and spoofing the MIME type, an attacker can manipulate the application to execute unintended actions. The vulnerability is due to the behavior of the `intervention/image` package, which attempts to interpret the supplied file contents as a URL, which then fetches its contents. This allows an attacker to exploit the vulnerability to perform SSRF attacks, disclose local file contents, or conduct a blind oracle attack.</p> <p>### Patches This has been patched in Flarum **v1.8**.</p> <p>## Workarounds As a temporary workaround for the SSRF aspect of the vulnerability, one can disable PHP&#39;s `allow_url_fopen` which will prevent the fetching of external files via URLs.</p> <p>### Credits Adam Kues - [Assetnote](https://assetnote.io/)</p> https://cve.radiocsirt.org/vuln/ghsa-67c6-q4j4-hccg https://cve.radiocsirt.org/vuln/gsd-2023-40033 gsd-2023-40033 https://cve.radiocsirt.org/vuln/gsd-2023-40033