Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 16 min 174 bronnen 2 kritiek 100 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-111663

HIGH · 8.6 CVSS Gepubliceerd: CWE-918

Beschrijving

Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the full response via the returned ActiveStorage blob URL.

References