1 matches found
GHSA-G2GW-Q38M-VJFC Lokka: Azure Resource Manager URL path validation issue
Lokka versions prior to 2.1.2 constructed Azure Resource Manager request URLs using direct string concatenation with user-controlled path input. Specially crafted path values could alter URL authority parsing and cause Azure Resource Manager bearer tokens to be sent to an unintended host. Version...
8.7CVSS5.8AI score
SaveExploits0References2
20