6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.0%
WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).
bugzilla.mozilla.org/show_bug.cgi?id=1550366