https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:49:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319104 EUVD-2026-319104 https://cve.radiocsirt.org/vuln/euvd-2026-319104 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47958 <p>CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal services and resources.</p> <p>CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal services and resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-47958 https://cve.radiocsirt.org/vuln/ghsa-c329-4cx6-v738 <p>CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal services and resources.</p> <p>CouchCMS 2.2.1 contains a server-side request forgery vulnerability that allows authenticated attackers to make arbitrary HTTP requests by uploading malicious SVG files. Attackers can upload SVG files containing external entity references through the browse.php endpoint to access internal services and resources.</p> https://cve.radiocsirt.org/vuln/ghsa-c329-4cx6-v738