Lucene search
GoogleOSV:CVE-2022-23206HistoryFeb 06, 2022 - 4:15 p.m.
CVE-2022-23206
2022-02-0616:15:07
Google
osv.dev
5
In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.
Related
cnvd
cnvd
Apache Traffic Control code issue vulnerability
2022-02-09 00:00:00
cvelist
cvelist
github
github
Server-Side Request Forgery in Apache Traffic Control
2022-02-07 00:00:23
gitlab
gitlab
Server-Side Request Forgery (SSRF)
2022-02-07 00:00:00
Server-Side Request Forgery (SSRF)
2022-02-06 00:00:00
osv
osv
Server-Side Request Forgery in Apache Traffic Control
2022-02-07 00:00:23
nvd
nvd
CVE-2022-23206
2022-02-06 16:15:07
cve
cve
CVE-2022-23206
2022-02-06 16:15:07
prion
prion
Design/Logic Flaw
2022-02-06 16:15:00