Fider: Server-Side Request Forgery via webhook configuration (CVE-2026-65967)
Fider versions before 0.34.0 are vulnerable to Server-Side Request Forgery (SSRF) in the webhook functionality, allowing authenticated administrators to perform unauthorized requests against internal network resources.
CVE search metadata
CVE search record: CVE-2026-65967. Severity: high. CVSS: 7.1. KEV: no. Product: Fider (< 0.34.0). Brief: Fider: Server-Side Request Forgery via webhook configuration (CVE-2026-65967). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fider-ssrf-cve-2026-65967/
Triage facts
Revision 1- Applicability
- Fider (< 0.34.0)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 20:10 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
Fider versions prior to 0.34.0 contain a Server-Side Request Forgery (SSRF) vulnerability. The application fails to properly validate user-supplied URLs within its webhook configuration feature. An attacker with administrative privileges can supply arbitrary URLs, forcing the Fider server to initiate HTTP requests to restricted internal network resources or cloud provider metadata services (e.g., IMDS). This issue is addressed in Fider version 0.34.0.
Impact
Successful exploitation allows an administrative user to bypass network access controls, potentially leading to unauthorized interaction with internal services or the exfiltration of sensitive cloud instance metadata. This impacts the confidentiality and accessibility of internal network infrastructure.
Recommendation
Upgrade all Fider installations to version 0.34.0 or later immediately. As a compensating control, ensure the Fider server is deployed within a network segment that strictly limits outbound access to only required external endpoints and blocks access to internal network ranges and cloud metadata service IP addresses (e.g., 169.254.169.254).
Immediate actions
Upgrade Fider to version 0.34.0 or later.
Threat Hunt
Review application logs for anomalous outgoing webhook requests initiated from the Fider server to internal IP address ranges or cloud metadata endpoints.
Data: Web application access logs, Outbound network flow logs
Mitigations
Apply network egress filtering to the Fider server to block access to internal segments and cloud metadata services.
CVE-2026-65967