https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:09:51.142773+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124466 fkie_cve-2026-124466 2026-11-11T23:09:51.144606+00:00

OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send HTTP requests by registering an OAuth2 client with an unvalidated jwks_uri. Attackers can trigger the fetch via the token introspection endpoint with an unsigned client_assertion to probe internal services and reach cloud metadata endpoints.

 https://db.gcve.eu/vuln/ghsa-xj63-9399-3j6q GHSA-xj63-9399-3j6q 2026-11-11T23:09:51.144680+00:00

OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send HTTP requests by registering an OAuth2 client with an unvalidated jwks_uri. Attackers can trigger the fetch via the token introspection endpoint with an unsigned client_assertion to probe internal services and reach cloud metadata endpoints.