CVE-2026-112254— agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery
Quick assessment
Affected
agit8or1 clientst0r
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 agit8or1 clientst0r 3.17.586 及更早版本中发现了一个安全漏洞。该漏洞影响 Property URL Importer 组件中 locations/services/property_url_importer.py 文件的 _fetch_html 函数。攻击者可通过操纵 url 参数引发服务器端请求伪造（SSRF）。该攻击可远程发起。相关利用代码已公开，可能被恶意使用。升级至版本 3.17.587 可修复此问题，对应补丁标识为 7e75c6cc6a07621c10be9b07fafd9
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| agit8or1 | clientst0r | 3.17.586 |
affected |
3.17.587 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112254
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_importer.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.17.587 addresses this issue. The patch is identified as 7e75c6cc6a07621c10be9b07fafd99e89a02e327. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| agit8or1 | clientst0r | 3.17.586 |
cpe:2.3:a:agit8or1:clientst0r:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-112254
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112254
请登录查看更多情报信息。
Vendor Pages for CVE-2026-112254 (2)
-
-
🔗 GitHub - agit8or1/clientst0r: Self-hosted IT documentation and service desk for MSPs. Client assets, runbooks, an encrypted credential vault and a native ticketing system with SLAs, contracts, quotes and invoices — multi-tenant, on your own infrastructure. Django 6 + MariaDB, Docker or one-line install. · GitHub Read full article product
IV. Related Vulnerabilities
Same weakness: CWE-918
-
CVE-2026-8355
IBM ContextForge MCP Gateway is affected by server-side requ -
CVE-2026-112991
MISP html_to_markdown Module SSRF via Incomplete IP Range Bl -
CVE-2026-112358
TiBillet Lespass APIv1 serializers.py get_img_from_url serve -
CVE-2026-112299
smrealms smr Album Website AlbumEditProcessor.php isUrlReach -
CVE-2026-112297
ptbsare anx-calibre-manager LLM Configuration llm.py LLMClie
V. Comments for CVE-2026-112254
No comments yet