Server-Side Request Forgery in YesWiki Bazar CSV Import
CVE-2026-116827

8.2HIGH

Key Information:

Vendor

Yeswiki

Status
Yeswiki
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116827?

YesWiki prior to version 4.7.0 is susceptible to a server-side request forgery (SSRF) vulnerability within the Bazar CSV import functionality. This flaw allows authenticated administrators to make arbitrary outbound requests by providing specially crafted URLs in CSV file uploads or image fields. Attackers can exploit this vulnerability to circumvent extension checks, enabling them to utilize query-string suffixes or redirects. By doing so, they can access cloud metadata, internal services, or even local files through 'file://', with responses potentially being stored in web-accessible directories.

Affected Version(s)

yeswiki 0 < 4.7.0

yeswiki 4.7.0

References

https://github.com/YesWiki/yeswiki/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/yeswiki-before-4.7.0...
third-party-advisory

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

manus-pi
manus-use
.