10317 matches found
Server side request forgery (ssrf)
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model...
Security Bulletin: IBM App Connect Enterprise is vulnerable to a server-side request forgery due to Node.js Request module (CVE-2023-28155).
Summary IBM App Connect Enterprise is vulnerable to a server-side request forgery due to Node.js Request module CVE-2023-28155. Vulnerability Details CVEID:CVE-2023-28155 DESCRIPTION: Node.js Request module is vulnerable to server-side request forgery, caused by a cross-protocol redirect bypass...
PT-2023-25185
Name of the Vulnerable Software and Affected Versions HP LaserJet Pro print products affected versions not specified Description The issue concerns a potential remote code execution and/or elevation of privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. This could...
Hp LaserJet Pro Printer 代码问题漏洞
HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. The HP LaserJet Pro print has a security vulnerability that stems from vulnerability to server-side request forgery SSRF attacks, which can be exploited by an attacker for potential remote code execution o...
CXF: SSRF Vulnerability
A SSRF vulnerability was found in Apache CXF. This issue occurs when parsing the href attribute of XOP:Include in MTOM requests, allowing an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type...
OSV-2023-521 Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60179 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf com.codeintelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrfSocket...
PT-2023-32967 · Pypi · Safeurl-Python
Name of the Vulnerable Software and Affected Versions: safeurl-python affected versions not specified Description: The issue allows bypassing of blacklisted hostnames by requesting the FQDN of the host, for example, by adding a . to the end. This could enable an attacker to circumvent blocks set ...
PT-2023-35888 · Oracle · Java.Base
Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the checkSsrf and checkSsrfSocket functions within the ServerSideRequestForgery class. This issue is related to the java.net.Socket.connect...
WordPress WPGraphQL Plugin <= 1.14.5 is vulnerable to Server Side Request Forgery (SSRF)
Software WPGraphQL Type Plugin Vulnerable versions = 1.14.5 Fixed in 1.14.6 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2023-23684 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID b0a8de3a4ab4 Credits Ravi Dharmawan Required privilege...
PlantUML Server-Side Request Forgery vulnerability
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
CVE-2023-3432
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
CVE-2023-3432
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
CVE-2023-3432 Server-Side Request Forgery (SSRF) in plantuml/plantuml
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
CVE-2023-3432
Server-Side Request Forgery SSRF in GitHub repository plantuml/plantuml prior to 1.2023.9...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889 Text4Shell Testing Script This repository co...
SUSE CVE-2023-36661
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows...
Server side request forgery (ssrf)
BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...
CVE-2023-33176 Blind SSRF When Uploading Presentation in BigBlueButton
BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...
CVE-2023-33176 Blind SSRF When Uploading Presentation in BigBlueButton
BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery SSRF vulnerability. In an insertDocument API request the user is able to supply a URL from which the presentation should be...