Server side request forgery (ssrf)

2022-07-1412:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.

CPENameOperatorVersion
request_tracker_for_incident_responsege5.0.0
request_tracker_for_incident_responselt5.0.3
request_tracker_for_incident_responselt4.0.3

Name	Operator	Version
request_tracker_for_incident_response	ge	5.0.0
request_tracker_for_incident_response	lt	5.0.3
request_tracker_for_incident_response	lt	4.0.3

References

docs.bestpractical.com/release-notes/rtir/4.0.3

docs.bestpractical.com/release-notes/rtir/5.0.3

docs.bestpractical.com/release-notes/rtir/index.html