5.3 MediumCWE-918
CVE-2026-49328
Apache Software Foundation Apache Fesod (Incubating) vulnerability
Apache Software FoundationApache Fesod (Incubating)
Status
- Not in CISA KEV
- Fixed in version 2.0.2-incubating
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 45% of scored CVEs
SeverityCVSS
5.3Medium
Description NVD
Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.
Coverage 1 article · 1 outlet
- Apache Fesod SSRF bug CVE-2026-49328 exposes internal systemsSecurityOnline · first in our coverage