Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Libredesk has an SSRF Vulnerability via Webhooks
Vulnerability Description
Libredesk is a self-hosted customer support desk application. Versions prior to 1.0.2-0.20260215211005-727213631ce6 fail to validate destination URLs for webhooks, allowing an attacker posing as an authenticated "Application Admin" to force the server to make HTTP requests to arbitrary internal destinations. This could compromise the underlying cloud infrastructure or internal corporate network where the service is hosted. This issue has been fixed in version 1.0.2-0.20260215211005-727213631ce6.
CVSS Information
N/A
Vulnerability Type
通过错误消息导致的信息暴露
Vulnerability Title
Libredesk 代码问题漏洞
Vulnerability Description
Libredesk是Abhinav Raut个人开发者的一个用户支持平台。 Libredesk 1.0.2-0.20260215211005-727213631ce6之前版本存在代码问题漏洞，该漏洞源于未验证Webhook目标URL，可能导致服务器向任意内部目标发起HTTP请求。
CVSS Information
N/A
Vulnerability Type
N/A