CERT24gcve-1-2026-20273 — SSRF in the MISP sourcecache module allows fetching arbitrary internal URLs via attribute enrichmentLoading data…
CERT24Threat Observatory
Period

gcve-1-2026-20273 — SSRF in the MISP sourcecache module allows fetching arbitrary internal URLs via attribute enrichment

The MISP sourcecache module accepts a user-supplied URL and makes a server-side request to it without validating the target. This may allow an authenticated MISP user with attribute-creation rights to direct requests to internal or non-HTTP resources and return the response into a MISP event.

← Back to intelligence

gcve-1-2026-20273 — SSRF in the MISP sourcecache module allows fetching arbitrary internal URLs via attribute enrichment

The MISP sourcecache module accepts a user-supplied URL and makes a server-side request to it without validating the target. This may allow an authenticated MISP user with attribute-creation rights to direct requests to internal or non-HTTP resources and return the response into a MISP event.