CVE-2022-38187 Prevent access to sharing/rest/content/features/analyze to unauthorized users

Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs...

CVE-2022-38187 Prevent access to sharing/rest/content/features/analyze to unauthorized users

Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs...

CVE-2022-38187

The CVE-2022-38187 issue affects Esri Portal for ArcGIS prior to 10.9.0, where the endpoint sharing/rest/content/features/analyze is exposed to anonymous users. This can allow an unauthenticated attacker to cause the portal to read arbitrary URLs. Affected component: Portal for ArcGIS; root cause...