CVE-2020-23534

2021-02-2516:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.1%

JSON

A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the ‘source’ parameter.

CPENameOperatorVersion
masterlabeq2.1.3
masterlabeq2.0.2
masterlabeq1.2
masterlabeq1.1
masterlabeq1.2-preview
masterlabeq2.1.2
masterlabeq2.1.5
masterlabeq1.0.2
masterlabeq2.0-alpha
masterlabeq2.1.1

Name	Operator	Version
masterlab	eq	2.1.3
masterlab	eq	2.0.2
masterlab	eq	1.2
masterlab	eq	1.1
masterlab	eq	1.2-preview
masterlab	eq	2.1.2
masterlab	eq	2.1.5
masterlab	eq	1.0.2
masterlab	eq	2.0-alpha
masterlab	eq	2.1.1

Rows per page:

1-10 of 191

References

github.com/gopeak/masterlab/issues/254