Server-Side Request Forgery Vulnerability in Serendipity by S9y

CVE-2026-73629

What is CVE-2026-73629?

Serendipity versions prior to 2.6.0 are vulnerable to a server-side request forgery attack due to improper filtering in the serendipity_url_allowed() function. This vulnerability allows authenticated users with specific permissions to submit requests to internal services, primarily by using hex-encoded IPv4 addresses and various formats of IPv6 literals. As a result, attackers can retrieve sensitive response bodies directly from the public uploads directory, potentially exposing critical internal data.

References