CVE-2026-92815 Details

A server-side request forgery (SSRF) vulnerability has been identified in changedetection.io versions through 0.60.6. The issue arises because the application fails to properly validate URLs specified in the 'Goto URL' action of browser steps. This oversight allows unauthenticated attackers to access internal network addresses and retrieve responses from restricted locations. The vulnerability is exploited by supplying arbitrary internal URLs in the 'optional_value' parameter, bypassing the application's existing SSRF protections on main watch URLs.

The vulnerability can be remediated by applying the same URL validation checks used for main watch URLs to the 'Goto URL' actions in browser steps. This includes adding the validation to the 'action_goto_url' method before the URL is sent to the browser, and ensuring that the 'browser-steps/browsersteps_update' endpoint is behind authentication.