CVE-2026-82263 - Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private network services, with response content returned in API responses. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-18545 [中危] CVE-2026-18545 - IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable t…
• CVE-2026-82289 [高危] CVE-2026-82289 - Gitingest through 0.3.1 fails to properly validate ho…
• CVE-2026-82285 [高危] CVE-2026-82285 - bisheng through 2.6.0-fix2 contains a server-side req…
• CVE-2026-82270 [高危] CVE-2026-82270 - Portkey AI Gateway through 1.15.2 contains a server-s…
• CVE-2026-82268 [高危] CVE-2026-82268 - Qwen-Agent through 0.0.34 contains a server-side requ…
• CVE-2026-82263 [中危] CVE-2026-82263 - Logto through 1.42.0 contains a server-side request f…
• CVE-2026-82262 [中危] CVE-2026-82262 - Logto through 1.42.0 contains a server-side request f…
• CVE-2026-55245 [未知] CVE-2026-55245 - Bifrost is an enterprise AI gateway for routing reque…