https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:32:36 +0000 https://cve.radiocsirt.org/vuln/cve-2025-9821 <p><strong>Affected:</strong> Mautic</p> <p>SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed</p> <p>DetailsWhen sending webhooks, the destination is not validated, causing SSRF.</p> <p>ImpactBypass of firewalls to interact with internal services. See https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/  for more potential impact.</p> <p>Resources https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html  for more information on SSRF and its fix.</p> <p><strong>Affected:</strong> Mautic</p> <p>SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed</p> <p>DetailsWhen sending webhooks, the destination is not validated, causing SSRF.</p> <p>ImpactBypass of firewalls to interact with internal services. See https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/  for more potential impact.</p> <p>Resources https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html  for more information on SSRF and its fix.</p> https://cve.radiocsirt.org/vuln/cve-2025-9821