The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.
CPE | Name | Operator | Version |
---|---|---|---|
lifetime_management_console | ge | 11 | |
lifetime_management_console | lt | 11.7.0 | |
outsystems | ge | 10 | |
outsystems | lt | 10.0.1104.0 | |
platform_server | ge | 11 | |
platform_server | lt | 11.9.0 |