Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xqf-mvhg-35j8

Опубликовано: 28 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment

EPSS

Процентиль: 100%
0.89186
Высокий

9.1 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.1
nvd
около 2 лет назад

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment

EPSS

Процентиль: 100%
0.89186
Высокий

9.1 Critical

CVSS3

Дефекты

CWE-918