Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmmq-9vg2-553m

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

EPSS

Процентиль: 50%
0.00699
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6
redhat
почти 9 лет назад

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

CVSS3: 6.3
nvd
почти 9 лет назад

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

EPSS

Процентиль: 50%
0.00699
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-918