Description
A Server-Side Request Forgery (SSRF) filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature. The application attempts to block internal/private IP addresses but can be bypassed using DNS rebinding (e.g., localtest.me which resolves to 127.0.0.1) or open redirect services (e.g., httpbin.org/redirect-to).
Recommendation
Update the hemmelig package to the latest compatible version. Followings are version details:
- Affected version(s): < 7.3.3
- Patched version(s): 7.3.3
References
Could your website be exposed too?
SmartScanner can check your website for hemmelig allows SSRF Filter bypass via Secret Request functionality and gives you actionable findings to investigate.
Start a free scanRelated Issues
- webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior - CVE-2025-68458
- webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects → SSRF + cache persistence - CVE-2025-68157
- Authentication Bypass via Default JWT Secret in NocoBase docker-compose Deployments - CVE-2025-13877
- evershop allows unauthenticated attackers to force server to initiate HTTP request via "GET /images" API - CVE-2025-67427
You might also like:
See something that needs correcting? Let us knowUpdated December 29, 2025