{"metadata": {"vulnerability": "CVE-2026-111720", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111720", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:33:30.766Z", "date_only": false, "value": "2026-10-16T14:33:30.766Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111720", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:40:07.659Z", "date_only": false, "value": "2026-10-16T17:40:07.659Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111720", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:40:07.659Z", "date_only": false, "value": "2026-10-16T17:40:07.659Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111720", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:40:07.659Z", "date_only": false, "value": "2026-10-16T17:40:07.659Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111720", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:17:56Z", "date_only": false, "value": "2026-10-16T18:17:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MC35-74MG-3V34", "record": "GHSA-MC35-74MG-3V34", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:56.533Z", "date_only": false, "value": "2026-10-16T18:17:56.533", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111720", "record": "FKIE_CVE-2026-111720", "field": "published"}, {"timestamp": "2026-10-16T18:34:56Z", "date_only": false, "value": "2026-10-16T18:34:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MC35-74MG-3V34", "record": "GHSA-MC35-74MG-3V34", "field": "published"}, {"timestamp": "2026-10-16T18:34:56Z", "date_only": false, "value": "2026-10-16T18:34:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MC35-74MG-3V34", "record": "GHSA-MC35-74MG-3V34", "field": "modified"}, {"timestamp": "2026-10-16T19:03:18.127Z", "date_only": false, "value": "2026-10-16T19:03:18.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111720", "record": "FKIE_CVE-2026-111720", "field": "lastModified"}, {"timestamp": "2026-10-16T19:07:10.256Z", "date_only": false, "value": "2026-10-16T19:07:10.256925Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117452153137595338", "record": "CVE-2026-111720", "field": "creation_timestamp", "uuid": "c5203f6b-26bf-42d2-ad7b-78d9dd23da02", "content": "CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or cloud metadata endpoints through redirect-following OkHttp requests and read back page titles, meta descriptions and favicons.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111720https://hackmd.io/@hieuPenguinnn/fish-island-web-parse-unauth-ssrfhttps://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/service/impl/chat/WebParserServiceImpl.java#L28-L45https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/controller/chat/WebParserController.java#L13-L25https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/config/CorsConfig.java#L33https://www.vulncheck.com/advisories/fish-island-backend-through-commit-7c61b78-ssrf-via-api-web-parse#lhccong #fish-island-backend#CVE_2026_111720#bot", "url": "https://infosec.exchange/users/cve/statuses/117452153137595338"}]}