Skip to content
Heist/ feed
Medium

Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery

Type: advisorySource: Official CVE List1 source record

A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains: "Git repository access is an intentional, privileged administrative function. Sencho explicitly supports repositories hosted on private LAN, VPC, VPN, CGNAT, and IPv6 ULA networks. The report does not demonstrate a privilege-boundary bypass or access by an unprivileged user. We therefore dispute the CVE characterization of this behavior. As defense in depth, we have nevertheless hardened repository access. Git HTTPS and SSH connections now validate and pin DNS resolution, reject loopback, link-local, multicast, selected special-use and metadata targets, disable redirects and inherited proxy routing, and retain strict SSH host-key verification."

Announced Source revision 1
Original source ↗

CVE-2026-108523

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-108523

Sencho

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:studio-saelix:sencho:*:*:*:*:*:*:*:*"
    ],
    "vendor": "Studio-Saelix",
    "modules": [
      "git-sources Browse API Endpoint"
    ],
    "product": "Sencho",
    "versions": [
      {
        "status": "affected",
        "version": "0.94.0"
      },
      {
        "status": "affected",
        "version": "0.94.1"
      }
    ]
  }
]
Related CVEs
CVE-2026-108523

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#17276 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement