Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qq54-c3p8-j5hg

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

EPSS

Процентиль: 50%
0.00669
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 3.5
redhat
больше 3 лет назад

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

CVSS3: 4.5
nvd
больше 3 лет назад

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

EPSS

Процентиль: 50%
0.00669
Низкий

7.5 High

CVSS3