{"id":"CVE-2026-117565","title":"Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch","summary":"Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a pag…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"ArtalkJS","product":"Artalk","affected":["Artalk < 2.10.1"],"published":"2026-10-27","updated":"2026-10-27","sourceUpdated":"2026-10-27T13:07:59.080Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-117565","references":[{"url":"https://github.com/ArtalkJS/Artalk/issues/1199","label":"GitHub Issue #1199"},{"url":"https://github.com/ArtalkJS/Artalk"},{"url":"https://github.com/ArtalkJS/Artalk/commit/dae6bf49c9efec755a5b3ac3e379b4004c29a049"},{"url":"https://github.com/ArtalkJS/Artalk/releases/tag/v2.10.1","label":"Artalk v2.10.1 Release Notes"},{"url":"https://github.com/ArtalkJS/Artalk/blob/v2.10.0/internal/dao/service.go#L96-L103"},{"url":"https://www.vulncheck.com/advisories/artalk-before-2.10.1-unauthenticated-ssrf-via-comment-page-title-fetch","label":"VulnCheck Advisory: Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch"}],"tags":["cve.org"],"ingestedAt":"2026-10-27T16:11:59.338Z","slug":"CVE-2026-117565","body":"## Overview\n\nArtalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a page_key to an internal URL, which GetTitleByURL fetches after only scheme validation, then read the page title through the public comment list.\n\n## Affected\n\n- `Artalk < 2.10.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}