Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qgqh-6wpp-27c4

Опубликовано: 15 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address).

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address).

EPSS

Процентиль: 24%
0.00081
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 4.3
nvd
почти 3 года назад

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address).

EPSS

Процентиль: 24%
0.00081
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918