Projeto-siga vulnerabilities
We track 1 vulnerability in Projeto-siga products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 7, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Projeto-siga vulnerabilities
- 7.3 High severity
siga: Server-Side Request Forgery
A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF Endpoint. This manipula