Frendi

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Frendi records in CISA KEV

No Frendi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Frendica · all components

TI-2021-08841 CVE-2021-27329 · GHSA-hg8j-9w2x-wj66

MEDIUM 46

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01535 Published 2021-02-18 No fix listed CWE-918