CVE-2021-33581

2022-03-3021:47:48

mitre

www.cve.org

mashzone nextgen

ssrf vulnerability

arbitrary tcp services

EPSS

0.001

Percentile

42.8%

JSON

MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService.