by Kastro
Paper/Archive/CVE-2026-30232

CVE-2026-30232

chartbrew chartbrew — Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs

EPSS 0.2%CVSS 9.6
critical.is priorityof 100
32
CVSS 9.6 (NVD)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 15.4.154 × 203.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 4.8.5, Chartbrew allows authenticated users to create API data connections with arbitrary URLs. The server fetches these URLs using request-promise without any IP address validation, enabling Server-Side Request Forgery attacks against internal networks and cloud metadata endpoints. This vulnerability is fixed in 4.8.5.

Affected

ProductAffectedFixed inSource
chartbrew< 4.8.5–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
GitHub_M (CNA)7.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/chartbrew/chartbrew/security/advisories/GHSA-p4rg-967r-w4cvrefgithub.com/chartbrew/chartbrew/commit/9c4a7e2b02acb25f0782bd4ac1f16407d59c2df1