https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T23:39:42.950125+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-107273 CVE-2026-107273 — Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site 2026-10-09T23:39:43.073889+00:00

Affected: gophish

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service responses and enumerate internal hosts and ports through error messages.