A vulnerability classified as critical was found in lin-snow Ech0 up to 4.2.7. The affected element is an unknown function of the file /api/website/title of the component Endpoint. The manipulation of the argument website_url results in server-side request forgery.
This vulnerability is cataloged as CVE-2026-35037. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is advised.
