CVE-2019-10686

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...

PT-2019-11992

Name of the Vulnerable Software and Affected Versions Ctrip Apollo versions through 1.4.0-SNAPSHOT Description A Server-Side Request Forgery SSRF issue was discovered in the API, allowing an attacker to perform an intranet port scan or send a GET request via the "/system-info/health" API endpoint...

CVE-2019-10686: Server-Side Request Forgery (SSRF)

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled...