Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xj2x-h5m7-w8gv

Опубликовано: 08 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

EPSS

Процентиль: 55%
0.00849
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.8
nvd
больше 4 лет назад

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

EPSS

Процентиль: 55%
0.00849
Низкий

Дефекты

CWE-918