Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p52h-5fjj-x2pc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.

EPSS

Процентиль: 47%
0.00237
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость компонента Content Library средства управления виртуальной инфраструктурой VMware vCenter Server, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 47%
0.00237
Низкий

Дефекты

CWE-918