CVE-2026-112254 - agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery
Brief
CVE ID : CVE-2026-112254
Published : Oct. 19, 2026, 7:30 p. m.
- 25 minutes ago
Description : A vulnerability was found in agit8or1 clientst0r up to 3.
- 586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_importer. py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used.
Upgrading to version 3.
- 587 addresses this issue. The patch is identified as 7e75c6cc6a07621c10be9b07fafd99e89a02e327. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.