Vulnerabilidades do Trueleaf ApiFlow
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Trueleaf ApiFlow: 1 registro(s), com versões afetadas e correções.
CVE-2026-4528
Alta · 7.3
CWE-918 21/03/2026
trueleaf ApiFlow URL Validation http_proxy.service.ts validateUrlSecurity server-side request forgery
A vulnerability was determined in trueleaf ApiFlow 0.9.7. The impacted element is the function validateUrlSecurity of the file packages/server/src/service/proxy/http_proxy.service.ts of the component URL Validation Handler. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.