https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 21:49:59 +0000 https://vulnerability.circl.lu/sighting/90137673-ee8c-4b2c-ba9e-7af4f9864f11/export {"uuid": "90137673-ee8c-4b2c-ba9e-7af4f9864f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63004", "type": "seen", "source": "https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf", "content": "# CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63004\n\n## Summary\nCVE-2026-63004 is a server-side request forgery (SSRF) vulnerability in the Unleash feature management platform. Authenticated administrators with CREATE_ADDON or UPDATE_ADDON privileges can exploit this vulnerability to initiate requests to loopback addresses, private networks, and cloud metadata endpoints, potentially leading to information disclosure and credential extraction.\n\n## TL;DR\nAuthenticated administrators can exploit server-side request forgery (SSRF) in Unleash integrations to access internal services and extract cloud metadata credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS Score**: 5.5 (Medium)\n- **Privileges Required**: High\n- **Exploit Status**: Proof of Concept\n- **Impact**: Server-Side Request Forgery & Information Disclosure\n\n## Affected Systems\n\n- Unleash Feature Management Platform\n- **Unleash**: < 7.5.2 (Fixed in: `7.5.2`)\n- **Unleash**: >= 7.6.0 < 7.6.5 (Fixed in: `7.6.5`)\n- **Unleash**: >= 8.0.0 < 8.0.2 (Fixed in: `8.0.2`)\n\n## Mitigation\n\n- Configure UNLEASH_ALLOW_PRIVATE_URL_IN_INTEGRATION=false to block outbound requests to private and local addresses\n- Establish an explicit integration allow-list using the UNLEASH_ALLOW_LIST_INTEGRATION environment variable\n- Implement host-level firewall rules to block outbound access to cloud metadata endpoints (169.254.169.254)\n\n**Remediation Steps:**\n1. Upgrade Unleash instances to versions 7.5.2, 7.6.5, or 8.0.2 or later\n2. Audit active integration configurations and webhook definitions for unauthorized loopback or private IP destinations\n3. Enforce network segmentation policies to restrict the server from initiating arbitrary egress connections to internal systems\n\n## References\n\n- [GHSA-5vf6-jrqr-78fj: Server-side request forgery in Unleash addons](https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj)\n- [Unleash Release v7.5.2 Patch](https://github.com/Unleash/unleash/releases/tag/v7.5.2)\n- [Unleash Release v7.6.5 Patch](https://github.com/Unleash/unleash/releases/tag/v7.6.5)\n- [Unleash Release v8.0.2 Patch](https://github.com/Unleash/unleash/releases/tag/v8.0.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63004) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T11:31:40.332070Z"} {"uuid": "90137673-ee8c-4b2c-ba9e-7af4f9864f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63004", "type": "seen", "source": "https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf", "content": "# CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63004\n\n## Summary\nCVE-2026-63004 is a server-side request forgery (SSRF) vulnerability in the Unleash feature management platform. Authenticated administrators with CREATE_ADDON or UPDATE_ADDON privileges can exploit this vulnerability to initiate requests to loopback addresses, private networks, and cloud metadata endpoints, potentially leading to information disclosure and credential extraction.\n\n## TL;DR\nAuthenticated administrators can exploit server-side request forgery (SSRF) in Unleash integrations to access internal services and extract cloud metadata credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS Score**: 5.5 (Medium)\n- **Privileges Required**: High\n- **Exploit Status**: Proof of Concept\n- **Impact**: Server-Side Request Forgery & Information Disclosure\n\n## Affected Systems\n\n- Unleash Feature Management Platform\n- **Unleash**: < 7.5.2 (Fixed in: `7.5.2`)\n- **Unleash**: >= 7.6.0 < 7.6.5 (Fixed in: `7.6.5`)\n- **Unleash**: >= 8.0.0 < 8.0.2 (Fixed in: `8.0.2`)\n\n## Mitigation\n\n- Configure UNLEASH_ALLOW_PRIVATE_URL_IN_INTEGRATION=false to block outbound requests to private and local addresses\n- Establish an explicit integration allow-list using the UNLEASH_ALLOW_LIST_INTEGRATION environment variable\n- Implement host-level firewall rules to block outbound access to cloud metadata endpoints (169.254.169.254)\n\n**Remediation Steps:**\n1. Upgrade Unleash instances to versions 7.5.2, 7.6.5, or 8.0.2 or later\n2. Audit active integration configurations and webhook definitions for unauthorized loopback or private IP destinations\n3. Enforce network segmentation policies to restrict the server from initiating arbitrary egress connections to internal systems\n\n## References\n\n- [GHSA-5vf6-jrqr-78fj: Server-side request forgery in Unleash addons](https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj)\n- [Unleash Release v7.5.2 Patch](https://github.com/Unleash/unleash/releases/tag/v7.5.2)\n- [Unleash Release v7.6.5 Patch](https://github.com/Unleash/unleash/releases/tag/v7.6.5)\n- [Unleash Release v8.0.2 Patch](https://github.com/Unleash/unleash/releases/tag/v8.0.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63004) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T11:31:40.332070Z"} https://vulnerability.circl.lu/sighting/90137673-ee8c-4b2c-ba9e-7af4f9864f11/export Sat, 22 Aug 2026 11:31:40 +0000 https://vulnerability.circl.lu/sighting/a52ba758-ff52-45e7-804a-82ea041c3d58/export {"uuid": "a52ba758-ff52-45e7-804a-82ea041c3d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63004", "type": "published-proof-of-concept", "source": "https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj", "content": "", "creation_timestamp": "2026-08-21T20:35:02.650508Z"} {"uuid": "a52ba758-ff52-45e7-804a-82ea041c3d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63004", "type": "published-proof-of-concept", "source": "https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj", "content": "", "creation_timestamp": "2026-08-21T20:35:02.650508Z"} https://vulnerability.circl.lu/sighting/a52ba758-ff52-45e7-804a-82ea041c3d58/export Fri, 21 Aug 2026 20:35:02 +0000