← Database

CVE-2026-88403

MEDIUM CVSS: 6.5 Published: 2026-09-21 Modified: 2026-09-22

Description

A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.

Affected Platforms

Unknown

Weakness Type

CWE-918

References