Vulnerabilidades de Mhdzumair

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mhdzumair: 1 registro(s), com severidade, exploração e correções.

Mediaflow-proxy 1

Somente exploradas (KEV) →

CVE-2026-100391 Alta · 8.2 CWE-918 25/09/2026

MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validation

MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and cloud metadata endpoints to read full responses from the proxy server.