3 matches found
CVE-2020-28043
MISP through 2.4.133 allows SSRF in the REST client via the usefullpath parameter with an arbitrary URL...
7.5CVSS7.1AI score0.01326EPSS
SaveExploits0
CVE-2020-28043
MISP up to version 2.4.133 contains a SSRF vulnerability in its REST client via the use_full_path parameter, allowing requests to arbitrary URLs. The root cause is exposure of server-side request construction in the REST client, enabling an attacker to induce the application to reach internal or ...
7.5CVSS7.5AI score0.01326EPSS
SaveExploits0References1Affected Software1
20