Approved changes feed: RSS · Atom
cpe:2.3:a:mosparo:mosparo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mosparo (4f5beca4-ad1e-53bd-adfa-67b5405dffa0) |
|---|---|
| Product | Mosparo (36d5bde3-f345-5ffe-9179-26261b27630a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mosparo/mosparo |
purl2cpe | 2026-06-01 10:17:01.360043 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41195 |
vulnerable | 2026-06-08 08:03:15.047865 |
mosparo: Rule package source URL stored SSRF enables internal HTTP probing
MEDIUM (5)
mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker-controlled URL that the server later fetches. Because the server follows http/https redirects and does not restrict private or loopback destinations, this becomes a stored SSRF primitive that can be turned into an internal HTTP probing oracle. This vulnerability is fixed in 1.4.13.
Published: 2026-05-12T21:24:35.643Z
Updated: 2026-05-18T14:51:58.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5687 |
vulnerable | 2026-06-08 06:19:44.493780 |
Cross-Site Request Forgery (CSRF) in mosparo/mosparo
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.
Published: 2023-10-20T16:22:43.785Z
Updated: 2024-09-11T18:35:46.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5375 |
vulnerable | 2026-06-08 06:19:43.449031 |
Open Redirect in mosparo/mosparo
MEDIUM (4.3)
Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.
Published: 2023-10-04T08:30:39.679Z
Updated: 2024-09-17T13:50:50.236Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.