{"id":"CVE-2026-116205","title":"YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax","summary":"YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-918"],"vendor":"YesWiki","product":"yeswiki","affected":["yeswiki < 4.7.0"],"published":"2026-10-25","updated":"2026-10-25","sourceUpdated":"2026-10-25T13:20:35.879Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116205","references":[{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-x9j5-r988-9jcc","label":"GitHub Security Advisory (GHSA-x9j5-r988-9jcc)"},{"url":"https://www.vulncheck.com/advisories/yeswiki-before-4.7.0-unauthenticated-ssrf-via-url-raw-inclusion-syntax","label":"VulnCheck Advisory: YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax"}],"tags":["cve.org"],"ingestedAt":"2026-10-25T22:08:29.939Z","slug":"CVE-2026-116205","body":"## Overview\n\nYesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler. Attackers can pass the syntax in the content parameter of the page render handler to reach internal hosts and ports and read their responses.\n\n## Affected\n\n- `yeswiki < 4.7.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}