GitLab 5.3.x - 11.2.6, 11.3.x - 11.3.7, 11.4.x - 11.4.2 SSRF Vulnerability

GitLab is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-44139

Sentinel 1.8.2 is vulnerable to Server-side request forgery SSRF...

Server side request forgery (ssrf)

Sentinel 1.8.2 is vulnerable to Server-side request forgery SSRF...

Server-Side Request Forgery (SSRF)

github.com/misp/misp is vulnerable to server-side request forgery. The vulnerability exists in restclientenablearbitraryurls in Server.php because the server doesn't restrict generateServerSettings to the CLI which allows a malicious attacker to perform unauthorized actions...

Server side request forgery (ssrf)

An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x and in other products. An endpoint in the backend Tomcat server of the Pascom allows SSRF, a related issue to CVE-2019-18394...

Server side request forgery (ssrf)

Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...

CVE-2021-46107

The CVE-2021-46107 entry concerns Ligeo Archives Ligeo Basics. Connected sources confirm a Server-Side Request Forgery (SSRF) vulnerability in the Ligeo Basics download feature, allowing an attacker to read documents. Details across sources consistently identify the affected product (Ligeo Basics...

GHSA-9VP3-7QWQ-83R9 Server-Side Request Forgery in FUXA

A Server-Side Request Forgery SSRF attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server...

CVE-2021-45851

CVE-2021-45851 is described across multiple sources as a Server-Side Request Forgery (SSRF) affecting FUXA 1.1.3. The core impact stated is that an attacker could obtain sensitive information from the server’s internal environment and services, with potential command execution on the server. The ...

Gogs < 0.12.5 Multiple Vulnerabilities

Gogs is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

Atlassian Fisheye and Crucible Server-Side Request Forgery Vulnerabilities

Atlassian Fisheye is a suite of source code depth viewers.Crucible is a suite of code review tools. Atlassian Fisheye and Crucible have a server-side request forgery vulnerability due to file and network resource enumeration in the DefaultRepositoryAdminService. An authenticated, remote attacker...

CVE-2022-27201

Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

CVE-2022-27201

Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

Server side request forgery (ssrf)

Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

CVE-2021-39051

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server...

Server side request forgery (ssrf)

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server...

CVE-2021-39051

CVE-2021-39051 affects IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.14.3. The vulnerability is a server‑side request forgery (SSRF) caused by improper input handling in the application server registration function. A remote attacker can craft the host address and port fields in ...

CVE-2021-39051

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server...

Server-side Request Forgery (SSRF)

github.com/gogs/gogs is vulnerable to server-side request forgery. An attacker can send malicious requests on behalf of the server into the network-internal hosts through the ParseRemoteAddr function of repo.go...

CVE-2021-43954

The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery SSRF vulnerability...