TI-2026-80149 CVE-2026-116069 · GHSA-m945-23c9-6845
Server-side request forgery in NiubiGEO via /audit-plan domain field
Priority LOW 36
NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan…