Описание
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.
EPSS
Процентиль: 56%
0.00792
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 9.8
github
2 месяца назад
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.
EPSS
Процентиль: 56%
0.00792
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-918