← Database

CVE-2026-48555

HIGH CVSS: 7.4 Published: 2026-05-29 Modified: 2026-07-22

Description

Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by passing user-controlled URLs to the addMediaFromUrl() method in InteractsWithMedia.php.

Affected Platforms

Unknown

Weakness Type

CWE-918

References