{"id":"CVE-2026-34428","title":"Vvveb < 1.0.8.1 SSRF via oEmbedProxy","summary":"Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed directly to getUrl() via curl without scheme or destination validation. A…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"givanz","product":"Vvveb","affected":["Vvveb < 1.0.8.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-04-20T14:44:41.884576Z"},"published":"2026-04-20","updated":"2026-11-08","sourceUpdated":"2026-11-08T14:02:08.447Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-34428","references":[{"url":"https://github.com/givanz/Vvveb/releases/tag/1.0.8.1","label":"Vvveb 1.0.8.1 Release Notes"},{"url":"https://github.com/givanz/Vvveb/commit/2d356844f37819bf771e7cd5e12a8686975e0b2b"},{"url":"https://www.vulncheck.com/advisories/vvveb-ssrf-via-oembedproxy"}],"tags":["cve.org"],"epss":0.00256,"epssPercentile":0.17342,"ingestedAt":"2026-11-08T14:51:22.457Z","slug":"CVE-2026-34428","body":"## Overview\n\nVvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed directly to getUrl() via curl without scheme or destination validation. Authenticated backend users can supply file:// URLs to read arbitrary files readable by the web server process or http:// URLs targeting internal network addresses to probe internal services, with response bodies returned directly to the caller.\n\n## Affected\n\n- `Vvveb < 1.0.8.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}