Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-41195

mosparo: Rule package source URL stored SSRF enables internal HTTP probing

mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker-controlled URL that the server later fetches. Because the server follows http/https redirects and does not restrict private or loopback destinations, this becomes a stored SSRF primitive that can be turned into an internal HTTP probing oracle. This vulnerability is fixed in 1.4.13.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Mosparo
Products
Mosparo
CVE-2023-5687

Cross-Site Request Forgery (CSRF) in mosparo/mosparo

Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Mosparo
Products
Mosparo
CVE-2023-5375

Open Redirect in mosparo/mosparo

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.

CVSS 3.1 · 6.1 Medium EPSS 39.0% KEV · Not listed
Vendors
Mosparo
Products
Mosparo