Lucene search
+L

7 matches found

OSV
OSV
•added 2021/08/20 6:15 p.m.•27 views

CVE-2021-22255

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...

6.5CVSS6.6AI score
SaveExploits0References3
Prion
Prion
•added 2021/08/20 6:15 p.m.•23 views

Design/Logic Flaw

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...

4CVSS6.2AI score0.01288EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/08/20 5:53 p.m.•37 views

CVE-2021-22255

SSRF in URL file upload in Baserow 1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting an internal address...

7.7CVSS7.5AI score0.01288EPSS
SaveExploits0References3
NVD
NVD
•added 2021/07/14 2:15 p.m.•40 views

CVE-2021-33213

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

6.5CVSS0.01304EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/07/14 1:40 p.m.•47 views

CVE-2021-33213

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

6.4AI score0.01304EPSS
SaveExploits1References2
CVE
CVE
•added 2021/07/14 1:40 p.m.•59 views

CVE-2021-33213

The CVE-2021-33213 entry documents an SSRF in Elements-IT HTTP Commander 5.3.3, specifically in the Upload from URL feature. When authenticated, an attacker can supply an internal address to retrieve HTTP/FTP resources from the internal network, exposing internal resources. Root cause: SSRF in th...

6.5CVSS6.2AI score0.01304EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/14 12:00 a.m.•6 views

CVE-2021-33213: Server-Side Request Forgery (SSRF)

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

6.5CVSS5.9AI score0.01304EPSS
SaveExploits1References2
Rows per page
Query Builder