What is GHSA-qgfh-wgwf-xmcx?

GHSA-qgfh-wgwf-xmcx is a security advisory published by GitHub Security Advisories with High severity. A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version...

Which CVE IDs does GHSA-qgfh-wgwf-xmcx cover?

GHSA-qgfh-wgwf-xmcx covers the following CVE IDs: CVE-2026-19678. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qgfh-wgwf-xmcxHigh

A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-19678 →

📋 Description

A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-19678
https://frevvo-docs.atlassian.net/wiki/spaces/frevvo110/overview?homepageId=1069252609
https://frevvo-docs.atlassian.net/wiki/spaces/frevvo110/pages/1069273270/Detailed+Release+Notes
https://github.com/advisories/GHSA-qgfh-wgwf-xmcx