SSRF in Meeting-room-booking-system Mrbs-code
CVE-2026-46382
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known worka…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Meeting-room-booking-system Mrbs-code — versions < 1.12.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)