Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qq54-c3p8-j5hg

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

EPSS

Процентиль: 31%
0.00121
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 3.5
redhat
около 3 лет назад

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

CVSS3: 4.5
nvd
около 3 лет назад

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

EPSS

Процентиль: 31%
0.00121
Низкий

7.5 High

CVSS3