Lucene search
+L

3 matches found

Prion
Prion
added 2017/11/13 5:29 p.m.17 views

Server side request forgery (ssrf)

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources...

7.5CVSS9.4AI score0.02594EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/11/13 5:0 p.m.22 views

CVE-2017-0907

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources...

9.5AI score0.02594EPSS
SaveExploits0References3
CVE
CVE
added 2017/11/13 5:0 p.m.76 views

CVE-2017-0907

The CVE affects Recurly Client .NET Library prior to versions 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, and 1.8.1. Root cause is improper use of Uri.EscapeUriString, leading to a Server-Side Request Forgery (SSRF) that could allow exposure or compromise of API keys or other critic...

9.8CVSS9.4AI score0.02594EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder