Grimoire
Monthly
Grimoire versions before 1.0.0 expose an unauthenticated SSRF in the /api/fetch-metadata POST handler, which passes attacker-supplied URLs into getMetadata() without any authentication check. Remote attackers who can reach a Grimoire instance can point it at loopback addresses, internal network hosts, or cloud metadata endpoints and read back the parsed title, description, and page content. Impact is limited to read-only information disclosure (CVSS 4.0: 6.9, VC:L); a public PoC reference exists but it is not verified as working exploit code, and there is no KEV confirmation of active exploitation. The vuln.today priority label places it in this_month: moderate, not emergency.
Grimoire versions before 1.0.0 expose an unauthenticated SSRF in the /api/fetch-metadata POST handler, which passes attacker-supplied URLs into getMetadata() without any authentication check. Remote attackers who can reach a Grimoire instance can point it at loopback addresses, internal network hosts, or cloud metadata endpoints and read back the parsed title, description, and page content. Impact is limited to read-only information disclosure (CVSS 4.0: 6.9, VC:L); a public PoC reference exists but it is not verified as working exploit code, and there is no KEV confirmation of active exploitation. The vuln.today priority label places it in this_month: moderate, not emergency.