Server-Side Request Forgery Vulnerability in Linkwarden by Linkwarden

⚠️ CVE-Referenzen: CVE-2026-44313
Linkwarden - Linkwarden - CRITICAL - CVE-2026-44313. Linkwarden, a self-hosted open-source collaborative bookmark manager, contains a Server-Side Request Forgery (SSRF) vulnerability in its fetchTitleAndHeaders function. This vulnerability allows authenticated users to perform arbitrary HTTP requests to internal services due to inadequate URL validation that only verifies schema prefixes like 'http://' or 'https://'. This can potentially expose sensitive internal resources. The issue has been rectified in version 2.13.0.
Quelle: securityvulnerability.io