CVE-2026-110225

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-110225
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110225.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-110225
Downstream
Published
2026-10-13T18:50:10Z
Modified
2026-10-14T10:46:47Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route
Details

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can create bookmarks pointing to loopback, private, or cloud metadata addresses and trigger ThumbnailsController::ajaxUpdate or saving to send blind GET requests, with open_shaarli exposing this to any visitor.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-918"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110225.json"
}
References

Affected packages

Git / github.com/shaarli/shaarli

Affected ranges

Type
GIT
Repo
https://github.com/shaarli/shaarli
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
bfeadb4e5856702c05279bb2a5c405f2ed802015
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "0.16.9"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*
0.5.3
Other
help
v0.*
v0.0.40beta
v0.0.41beta
v0.0.42beta
v0.0.43beta
v0.0.44beta
v0.0.45beta
v0.16.0
v0.16.1
v0.16.2
v0.16.3
v0.16.4
v0.16.5
v0.16.6
v0.16.7
v0.16.8
v0.16.9
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.5.4
v0.6.1
v0.6.2
v0.6.3
v0.6.4
v0.6.5
v0.7.0
v0.8.0
v0.8.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110225.json"