{"id":"EUVD-2026-105220","enisaUuid":"369fe6f3-b0cc-3229-94fc-c2a326247ca0","description":"ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local relative storage with no trusted global base URL. The server resolves the fixed uploads path against a request-controlled Host-derived origin, enabling bounded server-side requests to an attacker-selected host, port, and HTTP origin, but not arbitrary-path retrieval or the stored-provider and absolute-storage configurations. This issue is fixed in AI helper 1.0.0-beta.13.","datePublished":"Oct 20, 2026, 5:43:53 PM","dateUpdated":"Oct 20, 2026, 6:21:05 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-527g-ff96-x6wj\nhttps://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce\nhttps://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350\nhttps://github.com/apostrophecms/apostrophe/releases/tag/@apostrophecms/ai-helper@1.0.0-beta.13\n","aliases":"CVE-2026-113671\nGHSA-527g-ff96-x6wj\n","assigner":"GitHub_M","epss":0.33,"enisaIdProduct":[{"id":"6bf19464-1b5b-3aca-ab98-5818c0f84b50","product":{"name":"ai-helper","vendor":{"name":"@apostrophecms"}},"product_version":"1.0.0-beta.10, \u003c 1.0.0-beta.13"},{"id":"b546709f-e424-32dc-9ef4-a57ad5bf9a17","product":{"name":"Apostrophe ","vendor":{"name":"apostrophecms"}},"product_version":"4.25.0, \u003c 4.33.0"}],"enisaIdVendor":[{"id":"581f0048-0d5f-3a17-9a3f-a4d965f0e16a","vendor":{"name":"@apostrophecms"}},{"id":"7cf44843-9fe9-3c58-b511-4b1df6d49a85","vendor":{"name":"apostrophecms"}}],"enisaIdVulnerability":[{"id":"9d227cc0-59c9-386e-ba5c-9efb506347dd","vulnerability":{"id":"GHSA-527g-ff96-x6wj","description":"ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF","datePublished":"Oct 20, 2026, 6:11:01 PM","dateUpdated":"Oct 20, 2026, 6:11:01 PM","baseScore":0.0,"references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-527g-ff96-x6wj\nhttps://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce\nhttps://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350\nhttps://github.com/apostrophecms/apostrophe\nhttps://github.com/apostrophecms/apostrophe/releases/tag/@apostrophecms/ai-helper@1.0.0-beta.13\n","enisa_id":"EUVD-2026-105220\n","aliases":"GHSA-527g-ff96-x6wj\nCVE-2026-113671\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:08:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ceefa6de-5a58-35b3-87f7-80a947d6a324","vulnerability":{"id":"CVE-2026-113671","description":"ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local relative storage with no trusted global base URL. The server resolves the fixed uploads path against a request-controlled Host-derived origin, enabling bounded server-side requests to an attacker-selected host, port, and HTTP origin, but not arbitrary-path retrieval or the stored-provider and absolute-storage configurations. This issue is fixed in AI helper 1.0.0-beta.13.","datePublished":"Oct 20, 2026, 5:43:53 PM","dateUpdated":"Oct 20, 2026, 6:21:05 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-527g-ff96-x6wj\nhttps://github.com/apostrophecms/apostrophe/commit/9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce\nhttps://github.com/apostrophecms/apostrophe/commit/f84fd41cbf6c22eb8d0008fc9c25df1f7130b350\nhttps://github.com/apostrophecms/apostrophe/releases/tag/@apostrophecms/ai-helper@1.0.0-beta.13\n","enisa_id":"EUVD-2026-105220\n","assigner":"GitHub_M","epss":0.33,"dataProcessed":"Nov 1, 2026, 4:02:47 AM","vulnerabilityProduct":[{"id":"d0c30876-7205-35b5-a298-79eaf2605606","product":{"name":"ai-helper","vendor":{"name":"@apostrophecms"}},"product_version":"1.0.0-beta.10, \u003c 1.0.0-beta.13"},{"id":"e1614846-1e27-3ed1-b981-e83c9b7c756e","product":{"name":"Apostrophe ","vendor":{"name":"apostrophecms"}},"product_version":"4.25.0, \u003c 4.33.0"}],"vulnerabilityVendor":[{"id":"1c114b12-69ae-36e0-9edd-4eebeb81b12b","vendor":{"name":"apostrophecms"}},{"id":"d907fa50-c16d-3b4d-be06-e46a44bd4d60","vendor":{"name":"@apostrophecms"}}]}}],"enisaIdAdvisory":[]}