SUSE CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7055

CVE-2018-7055 affects RoomWizard, specifically GroupViewProxyServlet, prior to version 4.4.x. The underlying issue is an SSRF vulnerability triggered through the url parameter, enabling a remote attacker to induce server-side requests. The provided connected sources confirm the vulnerability but ...