Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7qf-prj4-7jhp

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.

A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.

EPSS

Процентиль: 26%
0.00091
Низкий

8.1 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.1
nvd
около 8 лет назад

A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.

EPSS

Процентиль: 26%
0.00091
Низкий

8.1 High

CVSS3

Дефекты

CWE-918