Description (CNA)
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ntfy / ntfy | affected 0 before 2.22.0 |
CWE
CWE-777
References
- https://gist.github.com/MightyNawaf/5d41d6e8ead16e217f86b016002ecae5
- https://github.com/binwiederhier/ntfy/releases/tag/v2.22.0
- https://ntfy.sh
ADP enrichment
No English description supplied.
No references supplied.