Description (CNA)
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provider_options.baseUrl results in server-side request forgery. The attack can be initiated remotely. Applying a patch is the recommended action to fix this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| decolua / 9Router | affected 0.5.0; affected 0.5.1; affected 0.5.2; affected 0.5.3; affected 0.5.4; affected 0.5.5; affected 0.5.6; affected 0.5.7; affected 0.5.8; affected 0.5.9; affected 0.5.10; affected 0.5.11; affected 0.5.12; affected 0.5.13; affected 0.5.14; affected 0.5.15; affected 0.5.16; affected 0.5.17; affected 0.5.18; affected 0.5.19; affected 0.5.20; affected 0.5.21; affected 0.5.22; affected 0.5.23; affected 0.5.24; affected 0.5.25; affected 0.5.26; affected 0.5.27; affected 0.5.28; affected 0.5.29; affected 0.5.30; affected 0.5.31; affected 0.5.32; affected 0.5.33; affected 0.5.34; affected 0.5.35; affected 0.5.36; affected 0.5.37; affected 0.5.38; affected 0.5.39; affected 0.5.40; affected 0.5.41; affected 0.5.42; affected 0.5.43; affected 0.5.44; affected 0.5.45; affected 0.5.46; affected 0.5.47; affected 0.5.48; affected 0.5.49; affected 0.5.50; affected 0.5.51; affected 0.5.52; affected 0.5.53; affected 0.5.54; affected 0.5.55 |
CWE
CWE-918
References
- https://vuldb.com/vuln/412342
- https://vuldb.com/vuln/412342/cti
- https://vuldb.com/cve/CVE-2026-103530
- https://vuldb.com/submit/956865
- https://github.com/decolua/9router/issues/3714
- https://github.com/decolua/9router/pull/3723
- https://github.com/decolua/9router/
ADP enrichment
No English description supplied.
No references supplied.