Approved changes feed: RSS · Atom
cpe:2.3:a:flowintel:flowintel:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Flowintel (c111305d-4f68-5297-8f04-3742f13c0105) |
|---|---|
| Product | Flowintel (1816e052-1f51-5570-a1b1-b0a4ba381670) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9813 |
vulnerable | 2026-06-08 08:08:59.089076 |
FlowIntel external reference URL probe allows server-side request forgery
FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py. An attacker who can submit an external reference URL can cause the application server to issue an HTTP HEAD request to an attacker-specified destination. Due to insufficient validation of the URL scheme and resolved destination address, affected versions may allow requests to loopback, link-local, private, reserved, or other restricted network resources, potentially enabling interaction with internal services or cloud metadata endpoints from the server's network context.
Published: 2026-05-28T09:27:26.124Z
Updated: 2026-05-28T10:31:00.608Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.