CVE-2026-104470
MEDIUMCVSS 5.0Description
YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur action. Attackers can embed the action with a champ parameter in wiki markup to reach loopback or internal services and partially read responses rendered into the page.
Timeline
Published:October 2nd, 2026 12:17 PM
Last modified:October 4th, 2026 4:16 PM
CVSS Scoring
CVSS v3: 5.0 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
- https://github.com/YesWiki/yeswiki/commit/22a5260b0381824e01d340ce9457c4adb9e18b23
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6rvf-7pwm-6j44
- https://www.vulncheck.com/advisories/yeswiki-before-4.6.7-ssrf-via-bazar-valeur-action-url-parameter
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6rvf-7pwm-6j44
Source: NIST NVD · Data may lag official sources by up to one minute