2023 OWASP Top-10 Series: Wrap Up

Over the past several months, we've taken a journey through the new 2023 OWASP API Security Top-10 list. In the previous 12 weekly posts, we've delved into each category, discussed what it is, how it's exploited, why it matters, and suggested effective protections for each. Now, as we conclude th...

Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

GHSA-W35P-WXWJ-RCM9 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572

CVE-2023-5572 describes a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite, affecting versions prior to 0.3.0. The issue arises in the vrite project and is tracked across multiple feeds (NVD, CVE lists, GHSA, osv, etc.). The standard references indicate the ...

GHSA-8JXC-5F94-22VH Magento Open Source allows Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Magento Open Source allows Server-Side Request Forgery (SSRF)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Server side request forgery (ssrf)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...

Adobe Commerce Code Issues Vulnerabilities

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A code issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stems from being affected by a server-side request forgery SSRF vulnerability that could lead to arbitrary file...

PT-2023-32185 · Vriteio · Vrite

Name of the Vulnerable Software and Affected Versions: vriteio/vrite versions prior to 0.3.0 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository vriteio/vrite. SSRF is a type of attack where an attacker can trick a server into making requests to internal...

Server side request forgery on fortiview top threats report generation feature.

A server-side request forgery vulnerability CWE-918 in FortiAnalyzer and FortiManager may allow a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request...

Webedition CMS 2.9.8.8 Server-Side Request Forgery

Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF Application: Webedition CMS Version: v2.9.8.8 Bugs: Blind SSRF Technology: PHP Vendor URL: https://www.webedition.org/ Software Link: https://download.webedition.org/releases/OnlineInstaller.tgz?p=1 Date of found: 07.09.2023 Author: Mirabbas...

PT-2023-6409 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.2.0 through 7.2.3 and before 7.0.8 FortiAnalyzer version 7.4.0 FortiManager versions 7.2.0 through 7.2.3 and before 7.0.8 FortiManager version 7.4.0 Description: A server-side request forgery issue allows a remote...

PyTorch TorchServe SSRF

The vulnerability of the allowedurls configuration in PyTorch TorchServe’s model servicing and scaling tools is related to insufficient validation of incoming requests during URL verification. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

ATX Ucrypt Code Issue Vulnerability

ATX Ucrypt is a series of media distribution gateways over IP Q2IP from ATX America, Inc. It is designed to provide reliable and secure HD or SD programming to hotels or other commercial venues. A security vulnerability exists in ATX Ucrypt 3.5 and prior versions, which stems from the presence of...

PT-2023-27137 · Unknown · Atx Ucrypt

Name of the Vulnerable Software and Affected Versions: ATX Ucrypt versions 3.5 and earlier Description: The web interface of ATX Ucrypt allows authenticated users, or attackers using default credentials for the admin, master, or user account, to include files via a URL in the "/hydra/view/get cc...