CVE

CVE-2026-101300 - Server-Side Request Forgery in Wegow PDF export

1d ago October 16, 2026 CVEfeed.io 0 views
CVE ID :CVE-2026-101300 Published : Oct. 16, 2026, 9:17 a.m. | 2 hours, 32 minutes ago Description :Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and emb
CVE ID :CVE-2026-101300
Published : Oct. 16, 2026, 9:17 a.m. | 2 hours, 32 minutes ago
Description :Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Full Article
Related Articles