Lucene search
HistoryMar 01, 2024 - 12:15 a.m.
CVE-2024-0403
cve
recipes
ssrf
http requests
nvd
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Recipes version 1.5.10 allows arbitrary HTTP requests to be made
through the server. This is possible because the application is
vulnerable to SSRF.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Recipes",
"vendor": "Recipes",
"versions": [
{
"status": "affected",
"version": "1.5.10"
}
]
}
]Related
prion
prion
Server side request forgery (ssrf)
2024-03-01 00:15:00
cvelist
cvelist
CVE-2024-0403 Recipes 1.5.10 - Blind SSRF
2024-02-29 23:31:15
nvd
nvd
CVE-2024-0403
2024-03-01 00:15:51
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Related for CVE-2024-0403