critical10.0
CVE-2021-27329
Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.
Impact
Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frendi | Frendica | Version 2021.01 |