CyberSecBulletin

Getfider vulnerabilities

We track 2 vulnerabilities in Getfider products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Getfider vulnerabilities

  • 7.1 High severity

    fider: Server-Side Request Forgery

    CVE-2026-65967Getfider

    Fider is a feedback portal for feature requests and suggestions. Prior to version 0.34.0, a Server-Side Request Forgery (SSRF) vulnerability exists in Fider due to insufficient validation of webhook URLs. The application allows user-controlled URLs to be fetch

  • 9.6 Critical severity

    fider: Authorization Bypass Through User-Controlled Key

    CVE-2026-65840Getfider

    Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode (HOST_MODE=multi), an attacker can use an email verification key issued by Tenant A to authenticate as the same email address on Tenant B. This compl