Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/19 12:00 a.m.•3 views

CVE-2023-41899: Server-Side Request Forgery (SSRF)

Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...

7.2CVSS6.9AI score0.00464EPSS
SaveExploits0References3
Rows per page
Query Builder