Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w89v-w2pq-cc25

Опубликовано: 01 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (SSRF), potentially leading to information disclosure, via a crafted API request. This issue affects Server: from 2026.1.1 through 2026.1.11, from 2025.3.1 through 2025.3.17.

Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (SSRF), potentially leading to information disclosure, via a crafted API request. This issue affects Server: from 2026.1.1 through 2026.1.11, from 2025.3.1 through 2025.3.17.

EPSS

Процентиль: 8%
0.0003
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 4.3
nvd
7 дней назад

Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (SSRF), potentially leading to information disclosure, via a crafted API request. This issue affects Server: from 2026.1.1 through 2026.1.11, from 2025.3.1 through 2025.3.17.

EPSS

Процентиль: 8%
0.0003
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918