CVE-2021-33581

MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService...

CVE-2021-33581

MashZone NextGen up to 10.7 GA is affected by SSRF in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService, allowing an attacker to interact with arbitrary TCP services by abusing the availability-check feature for a PPM connection. Affected product is MashZone NextGen; the root cau...