Lucene search
GoogleOSV:CVE-2019-10686HistoryApr 01, 2019 - 5:29 p.m.
CVE-2019-10686
2019-04-0117:29:00
Google
osv.dev
4
An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled.
References
Related
cvelist
cvelist
CVE-2019-10686
2019-04-01 16:21:00
nvd
nvd
CVE-2019-10686
2019-04-01 17:29:00
osv
osv
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
2019-04-18 14:27:42
github
github
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
2019-04-18 14:27:42
cve
cve
CVE-2019-10686
2019-04-01 17:29:00
prion
prion
Server side request forgery (ssrf)
2019-04-01 17:29:00