HIGH 7.1 NVD
CVE-2026-87821
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authent
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IAM credentials by supplying malicious URLs without host validation or redirect restrictions.
References
- https://github.com/laradashboard/laradashboard
- https://github.com/laradashboard/laradashboard/blob/v0.9.2/app/Services/Builder/MarkdownFe
- https://github.com/laradashboard/laradashboard/blob/v1.3.1/app/Http/Controllers/Api/Builde
- https://github.com/laradashboard/laradashboard/blob/v1.3.1/app/Services/Builder/MarkdownFe
- https://github.com/laradashboard/laradashboard/blob/v1.3.2/app/Support/Security/SafeUrlVal
This high severity vulnerability with a CVSS score of 7.1 was published on 2026-09-09 via NVD.
vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.