CVE-2026-33284
GlobalLeaks has insufficient URL validation in user support API
Résumé
GlobalLeaks has insufficient URL validation in user support API
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov