CVE-2025-64522
Soft Serve is vulnerable to SSRF through its Webhooks
Résumé
Soft Serve is vulnerable to SSRF through its Webhooks
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1 fixes the vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com