VulnCheck KEV: CVE-2021-27670

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...

URIjs Hostname spoofing via backslashes in URL

Impact If using affected versions to determine a URL's hostname, the hostname can be spoofed by using a backslash \ character as part of the scheme delimiter, e.g. scheme:/\hostname. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and...

CVE-2021-27670

Summary: CVE-2021-27670 affects Appspace 6.2.4 with a Server-Side Request Forgery (SSRF) flaw in the api/v1/core/proxy/jsonprequest parameter. The connected sources describe the vulnerability and corroborate that exploitable SSRF can lead to access to internal resources and data leakage, with som...