Bug 2563992 (CVE-2026-119545)
| Summary: | CVE-2026-119545 forgejo: Forgejo: Server-Side Request Forgery via OpenID discovery | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in Forgejo. A remote, unauthenticated attacker can conduct Server-Side Request Forgery (SSRF) by submitting an arbitrary OpenID identifier to the login endpoint. This issue forces the server to send unverified HTTP requests to internal addresses, loopback interfaces, or cloud metadata endpoints. Consequently, an attacker can perform internal port scanning and probe restricted services that are not directly accessible from the public network.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565509, 2565510, 2565511, 2565512 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-30 13:17:41 UTC
|