CVE-2026-109190
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Configuration. The manipulation of the argument specUrl leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.