CVE-2026-110223lowCWE-918

CVE-2026-110223: falha de baixa gravidade em Kareadita Kavita

Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Kavita

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.3%
Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or HTTPS redirects. Attackers can submit a URL to POST /api/Cbl/upload-cbl-file whose host rebinds or redirects to internal addresses after validation, enabling blind internal port and service probing.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Kareadita · Kavita
CVEs relacionadas — Kareadita Kavita

No mesmo produto, das mais perigosas para as menos.

CVE-2022-51024HIGHKavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload EndpointEPSS 0.6%CVE-2024-39307LOWCross-Site Scripting (XSS) vulnerability via crafted ebooks in KavitaEPSS 0.5%CVE-2026-44775MEDIUMKavita: No authentication at /api/Reader/imageEPSS 0.3%CVE-2026-44776MEDIUMKavita: IDOR in /api/Download/*EPSS 0.3%CVE-2026-47202CRITICALKavita: Pre-Auth Account TakeoverEPSS 0.2%