Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-122008— Oqtane Framework before 10.3.0 SSRF via File Upload From URL

Quick assessment

Affected
oqtane oqtane.framework
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oqtane Framework 10.3.0 之前的版本在 的 端点中存在服务端请求伪造（SSRF）漏洞。该漏洞允许已认证的注册用户通过向 方法传递由调用者控制的 参数，且未对 URL 的协议（scheme）、主机名或 IP 地址进行验证，从而诱导服务器发起对任意 URL 的请求。攻击者可利用此漏洞请求内部资源（例如云实例元数据服务或绑定在 localhost 上的管理接口），将获取的响应保存为文件至其个人用户目录，并通过下载端点检索该文件，进而窃取敏感的内部数据或枚举内部网络中的主机与端口。

CVSS 5.0 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-122008

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Oqtane Framework before 10.3.0 SSRF via File Upload From URL
Source: CVE Program / CVE List V5
Vulnerability Description
Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of FileController.cs that allows authenticated registered users to make the server fetch arbitrary URLs by supplying a caller-controlled url parameter to HttpClient.GetStreamAsync without validating the scheme, host, or IP address. Attackers can request internal resources such as cloud instance metadata services or localhost-bound management interfaces, save the fetched response as a file in their own user folder, and retrieve it via the download endpoint to exfiltrate sensitive internal data or enumerate internal network hosts and ports.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
oqtane oqtane.framework 1.0.0 ~ 10.3.0 -

II. Public POCs for CVE-2026-122008

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-122008

请登录查看更多情报信息。

Other References for CVE-2026-122008 (3)

IV. Related Vulnerabilities

Same product: oqtane.framework
Same vendor: oqtane
Same weakness: CWE-918