MEDIUM 5.3 NVD
CVE-2026-120331
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to t
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to the mail module can make the server send requests to hosts in the internal network.
References
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-11-03 via NVD.
vulnfeed aggregates 18371 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.