SB20260728113 - Server-Side Request Forgery (SSRF) in Twenty

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260728113

SB20260728113 - Server-Side Request Forgery (SSRF) in Twenty

Published: July 28, 2026

Security Bulletin ID SB20260728113
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2026-33975)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to improper input validation in SecureHttpClientService when processing IPv4-mapped IPv6 URL addresses. A remote user can send a specially crafted URL using an IPv4-mapped IPv6 address to disclose sensitive information.

The issue arises because Node.js normalizes IPv4-mapped IPv6 addresses to hex form before the address reaches the connection logic, allowing requests to internal services and cloud metadata endpoints without DNS resolution.


Remediation

Install update from vendor's website.

References