Skip to content
Threat Feed
Subscribe

Product

Kestra OSS (<= 1.3.31, < 2.0.0)

1 brief RSS
high advisory

Unauthenticated SSRF in Kestra OSS via Pebble http() Function

An unauthenticated SSRF vulnerability in the Kestra OSS Pebble template engine allows remote attackers to perform arbitrary requests to internal network services and cloud metadata endpoints.

Kestra OSS ssrf vulnerability kestra
1r 3t 1c 1i