CERT24GHSA-p3pr-8f3m-4qp8 — pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification hostLoading data…
CERT24Threat Observatory
Period

GHSA-p3pr-8f3m-4qp8 — pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host

The pyLoad WindowsPhoneNotify addon takes its notification host directly from the pushurl configuration value. An authenticated non-admin user with the SETTINGS permission can configure the host and path and cause pyLoad to send blind HTTP POST requests to internal destinations.

← Back to intelligence

GHSA-p3pr-8f3m-4qp8 — pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host

The pyLoad WindowsPhoneNotify addon takes its notification host directly from the pushurl configuration value. An authenticated non-admin user with the SETTINGS permission can configure the host and path and cause pyLoad to send blind HTTP POST requests to internal destinations.