Webstudio-is vulnerabilities
We track 1 vulnerability in Webstudio-is products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Webstudio-is vulnerabilities
- 8.6 High severity
webstudio: Server-Side Request Forgery
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints