CVE-2026-33284

MEDIO 4.3CVE-2026-33284 · Published 27/03/2026 · updated 26/10/2026

In breve

CVE-2026-33284 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda globaleaks (globaleaks).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.20%, superiore al 10.4% delle vulnerabilità.
Correzione: aggiornare a 5.0.89 o successiva.

Package	Affected versions	Patched versions
globaleaks globaleaks	`< 5.0.89`	`5.0.89`

Description

GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue.

References

globaleaks/globaleaks-whistleblowing-software security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free