fr0tt vulnerabilities

Products

• benotes 1

Latest fr0tt CVEs

Newest publication first

1. CVE-2026-116224 fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery

   Published 2026-10-26

   Medium·CVSS 5.3 EPSS 0.23%

   A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of the file app/Http/Controllers/PostController.php of the component Bookmark Metadata Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.