CVE-2026-117565

EUVD-2026-110843
Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a page_key to an internal URL, which GetTitleByURL fetches after only scheme validation, then read the page title through the public comment list.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/ArtalkJS/Artalk
https://github.com/ArtalkJS/Artalk/blob/v2.10.0/internal/dao/service.go#L96-L103
https://github.com/ArtalkJS/Artalk/commit/dae6bf49c9efec755a5b3ac3e379b4004c29a049
https://github.com/ArtalkJS/Artalk/issues/1199
https://github.com/ArtalkJS/Artalk/releases/tag/v2.10.1
https://www.vulncheck.com/advisories/artalk-before-2.10.1-unauthenticated-ssrf-via-comment-page-title-fetch