2132 matches found
CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)
CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery SSRF vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to...
CVE-2021-43959
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery SSRF vulnerability in the CSV importing feature of JSM Insight. When running in an environment...
Server side request forgery (ssrf)
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to server-side request forgery (CVE-2022-22416)
Summary IBM Sterling Partner Engagement Manager has addressed a server-side request forgery. Vulnerability Details CVEID:CVE-2022-22416 DESCRIPTION: IBM Sterling Partner Engagement Manager is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send...
VMware vCenter Server 6.5 / 6.7 / 7.0 SSRF (VMSA-2022-0018)
The version of VMware vCenter Server installed on the remote host is 6.5 prior to 6.5 U3t, 6.7 prior to 6.7 U3r, or 7.0 prior to 7.0 U3f. It is, therefore, affected by a server-side request forgery SSRF vulnerability. A remote attacker with network access to port 433 can exploit this send a URL...
VMSA-2022-0018:VMware vCenter Server updates address a server-side request forgery vulnerability
Advisory ID: VMSA-2022-0018 CVSSv3 Range: 5.3 Issue Date:2022-07-12 Updated On: 2022-07-23 CVEs: CVE-2022-22982 Synopsis: VMware vCenter Server updates address a server-side request forgery vulnerability CVE-2022-22982 RSS Feed Download PDF Download Text File Share this page on social media: 1...
Server side request forgery (ssrf)
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information...
CVE-2022-2339 Server-Side Request Forgery (SSRF) in nocodb/nocodb
With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information...
U.S. Dept Of Defense: SSRF ACCESS AWS METADATA - █████
Hi Security Team, Based on https://hackerone.com/hack-us-h1c challenge, I have urgent vulnerability and the challenge doesn't accept reprots for now 1:56 AM . I have found a SSRF Vulnerability which allow access to the AWS metadata, using Parameter ?url= as shown blew An attacker can tunnel into...
GHSA-H9CW-7G8J-H66H Server-Side Request Forgery in link-preview-js
The package link-preview-js before 2.1.17 are vulnerable to Server-side Request Forgery SSRF which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection...
Server side request forgery (ssrf)
Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery SSRF via the template remote download function...
parse-url 代码问题漏洞
parse-url is an advanced url parser with git url support from the individual developer Ionică Bizău. A code issue vulnerability exists in parse-url versions prior to 7.0.0, which stems from improper handling of usernames and passwords, undetected hostnames, and can be exploited by an attacker to...
CVE-2021-20544
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198931...
CVE-2021-20421
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
Exploit for Server-Side Request Forgery in Atlassian Jira_Data_Center
CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobi...
CVE-2022-34013
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...
CVE-2022-34011
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...
CVE-2022-34011
CVE-2022-34011 refers to a Server-Side Request Forgery (SSRF) in OneBlog v2.3.4. The vulnerability is triggered through the entryUrls parameter, which fails to properly validate user input, allowing an attacker to induce requests from the affected server and potentially probe the server’s intrane...