| Package | Affected versions | Patched versions |
|---|---|---|
| opensupports | = 4.11.0 |
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects OpenSupports: 4.11.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free