Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29xc-2rhm-5f2q

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

EPSS

Процентиль: 34%
0.00135
Низкий

7.3 High

CVSS3

Дефекты

CWE-59
CWE-918

Связанные уязвимости

CVSS3: 7.3
nvd
почти 2 года назад

The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random resources by means of following 301 HTTP redirects presented by external servers when downloading templates or ISOs. Users are recommended to upgrade to version 4.18.1.1 or 4.19.0.1, which fixes this issue.

EPSS

Процентиль: 34%
0.00135
Низкий

7.3 High

CVSS3

Дефекты

CWE-59
CWE-918