Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6v8-pg97-856j

Опубликовано: 25 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A successful exploit could allow an attacker to leverage connections and permissions available to the host server.

A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A successful exploit could allow an attacker to leverage connections and permissions available to the host server.

EPSS

Процентиль: 54%
0.0031
Низкий

8.8 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A successful exploit could allow an attacker to leverage connections and permissions available to the host server.

EPSS

Процентиль: 54%
0.0031
Низкий

8.8 High

CVSS3

Дефекты

CWE-918