Описание
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
Уязвимые конфигурации
Конфигурация 1Версия до 5.2.2 (исключая)
cpe:2.3:a:ui:unifi_talk_application:*:*:*:*:*:*:*:*
EPSS
Процентиль: 31%
0.0037
Низкий
7.5 High
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 7.5
github
3 месяца назад
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
EPSS
Процентиль: 31%
0.0037
Низкий
7.5 High
CVSS3
Дефекты
CWE-918