Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wjv5-2q32-6v64

Опубликовано: 07 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

 An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering connection to arbitrary address.

 An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering connection to arbitrary address.

EPSS

Процентиль: 37%
0.00158
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.8
nvd
почти 2 года назад

 An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server (Server IP/DNS field) and is triggering connection to arbitrary address.

EPSS

Процентиль: 37%
0.00158
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-20