The vulnerability of the SSL-VPN daemon on the FortiOS operating system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the SSL-VPN daemon on the FortiOS operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted HTTP requests to the /proxy endpoint...

The vulnerability of the SSL-VPN daemon on the FortiOS operating system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the SSL-VPN daemon on the FortiOS operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted HTTP requests to the /proxy endpoint...

PT-2023-3229 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.4.0 through 6.4.12 Fortinet FortiOS versions 7.0.0 through 7.0.11 Fortinet FortiOS versions 7.2.0 through 7.2.4 Fortiproxy versions 7.0.0 through 7.0.10 Fortiproxy versions 7.2.0 through 7.2.4 Description: A null...

Null pointer dereference in sslvpnd proxy endpoint

...

PT-2023-3230 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.0 through 6.0.16 FortiOS versions 6.2.0 through 6.2.14 FortiOS versions 6.4.0 through 6.4.12 FortiOS versions 7.0.0 through 7.0.11 FortiOS versions 7.2.0 through 7.2.4 FortiProxy versions 1.0.0 through 1.0.7 FortiProxy...

PT-2023-23008 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: Pimcore versions prior to 10.5.21 Description: Pimcore is an open source data and experience management platform. The /admin/misc/script-proxy API endpoint, accessible by an authenticated administrator user, is vulnerable to arbitrary...

CVE-2022-25026

A Server-Side Request Forgery SSRF in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy...

PT-2023-12775 · Rocket · Rocket Trufusion Portal

Name of the Vulnerable Software and Affected Versions: Rocket TRUfusion Portal version 7.9.2.1 Description: A Server-Side Request Forgery SSRF issue allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy...

CVE-2022-3708

The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it possible for authenticated users to ma...

WordPress plugin Web Stories 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Grafana 信息泄露漏洞

Grafana is Grafana Labs open source set of open source monitoring tools that provide a visual monitoring interface . The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana has an information disclosure vulnerability. An attacker exploiting this...

PT-2022-14065 · Jgraph · Jgraph/Drawio

Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.4 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability on the /proxy endpoint in the jgraph/drawio GitHub repository. This allows an attacker to make a request as the serve...

WordPress plugin HubSpot 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress HubSpot plugin prior to 8.8.15 are vulnerable to server-side request...

Cozy Cross-Site Scripting Vulnerability

Cozy is a personal cloud platform. The platform features file storage and management, application backup, and schedule management. A cross-site scripting vulnerability exists in Cozy. A remote attacker can exploit this vulnerability to gain administrator access via JavaScript code in the 'url'...

CVE-2018-6824

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

Apache Ambari 1.5.0 - 2.0.2 SSRF Vulnerability

Apache Ambari is prone to server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Server side request forgery (ssrf)

Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...

CVE-2015-1775

Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...

CVE-2015-1775

Server-side request forgery SSRF vulnerability in the proxy endpoint api/v1/proxy in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call...

Alfresco - proxy?endpoint Server-Side Request Forgery

Alfresco - proxy?endpoint Server-Side Request Forgery source: https://www.securityfocus.com/bid/68/info http://www.example.com/alfresco/proxy?endpoint=http://internalsystem:port 663/info Alfresco Community Edition is prone to multiple security vulnerabilities. An attacker may leverage these issue...