Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29xc-2rhm-5f2q

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

EPSS

Процентиль: 52%
0.00785
Низкий

7.3 High

CVSS3

Дефекты

CWE-59
CWE-918

Связанные уязвимости

CVSS3: 7.3
nvd
больше 2 лет назад

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

EPSS

Процентиль: 52%
0.00785
Низкий

7.3 High

CVSS3

Дефекты

CWE-59
CWE-918