Описание
A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.
Ссылки
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- PatchThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.203 (исключая)
cpe:2.3:a:sandstorm:sandstorm:*:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00091
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.
EPSS
Процентиль: 26%
0.00091
Низкий
8.1 High
CVSS3
5.5 Medium
CVSS2
Дефекты
CWE-918