{"id":"CVE-2026-111720","revision":"226f57946c5f4d6cab25c80232c57327","records":[{"revision":"226f57946c5f4d6cab25c80232c57327","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-111720","aliases":[],"title":"fish-island-backend through commit 7c61b78 SSRF via /api/web/parse","description":"fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or cloud metadata endpoints through redirect-following OkHttp requests and read back page titles, meta descriptions and favicons.","state":0,"publishedAt":"2026-10-16T17:40:07.659+00:00","modifiedAt":"2026-10-19T14:13:29.044+00:00","affected":[{"ecosystem":"Vendor product","name":"fish-island-backend","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"lhccong\",\n                    \"product\": \"fish-island-backend\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThanOrEqual\": \"7c61b7861e99d3970beb34103c244b79e4de7d88\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ],\n                    \"packageURL\": \"pkg:github/lhccong/fish-island-backend\",\n                    \"repo\": \"https://github.com/lhccong/fish-island-backend\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3,"severity":"MEDIUM"}],"references":["https://hackmd.io/@hieuPenguinnn/fish-island-web-parse-unauth-ssrf","https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/service/impl/chat/WebParserServiceImpl.java#L28-L45","https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/controller/chat/WebParserController.java#L13-L25","https://github.com/lhccong/fish-island-backend/blob/7c61b7861e99d3970beb34103c244b79e4de7d88/src/main/java/com/cong/fishisland/config/CorsConfig.java#L33","https://www.vulncheck.com/advisories/fish-island-backend-through-commit-7c61b78-ssrf-via-api-web-parse"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-111720","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-111720","identifiers":["CVE-2026-111720"]},"retained":false,"historicalAffected":[]}],"coverage":[]}