Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API
Flextype CMS v1.0.0-alpha.3 exposes an SSRF flaw in its /api/v1/query endpoint, letting authenticated users make the server send arbitrary HTTP requests.
1 stories, newest first · one card per story
Flextype CMS v1.0.0-alpha.3 exposes an SSRF flaw in its /api/v1/query endpoint, letting authenticated users make the server send arbitrary HTTP requests.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views