Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjmx-9q6q-qmpx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.

EPSS

Процентиль: 58%
0.00359
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 9.1
nvd
больше 4 лет назад

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.

EPSS

Процентиль: 58%
0.00359
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-918