Open-Xchange: SSRF - Image Sources in HTML Snippets - 727234 bypass

This is about incomplete fix for my recent bug 727234. In short, the /ajax/snippet?action=import endpoint allows to create HTML snippets. URLs of images are extracted from HTML and their content is fetched and attached to created snippet. For more details please see 727234. With the fix applied,...

Open-Xchange: SSRF - URL Attachments - 725307 bypass

This is about incomplete fix for my recent bug 725307. In short, the /ajax/attachment?action=attach endpoint allows to create URL based attachments. Content of specified URL is fetched and used as attachment body. For more details please see 725307. With the fix applied, the URL is validated befo...

GHSA-36HF-6HP2-9G4C Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms

In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, groupnew.jsp, loginmessage.jsp, xmlcontentrepair.jsp, and /system/workplace/admin/history/settings/index.jsp...

OPENSUSE-SU-2019:2425-1 Security update for chromium, re2

This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo1154806: CVE-2019-13699: Use-after-free in media CVE-2019-13700: Buffer overrun in Blink CVE-2019-13701: URL spoof in navigation CVE-2019-13702: Privilege elevation in Installer CVE-2019-13703: URL b...

Atlassian Jira Server-Side Request Forgery Vulnerability (CNVD-2019-32327)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A server-side request forgery vulnerability exists in the /plugins/servlet/gadgets/makeRequest resource in versions of Atlassian Jira prior to 8.4.0, which can be exploit...

GitLab Trust Management Issues Vulnerabilities

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A trust management issue vulnerability exists in GitLab...

Server-Side Request Forgery (SSRF)

App Studio millicore is vulnerable to server-side request forgery SSRF attacks. An attacker could exploit a flaw in the externalrequest api call. This allows an attacker to probe the network internal resources, and access restricted endpoints which leads to a disclosure of information...

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked...

F5 Networks BIG-IP : BIG-IP APM Portal Access vulnerability (K54358225)

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application...

XXRF Shots - Tool to Test SSRF Vulnerabilities

What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability class where attacker sends crafted request from a vulnerable web application, including the unauthorised access to the internal resources behind the firewall which are inaccessible directly from the external...

Users Unable to Access Internal Resources After Connecting Through Full VPN Using IIP on AWS

...

Trovebox Server-Side Request Forgery Vulnerability

Trovebox is an open source image sharing and management platform. webhook is one of the lightweight event handling API. A server-side request forgery vulnerability exists in the webhook component of Trovebox versions prior to 4.0.0-rc6. An attacker can exploit this vulnerability by sending an HTT...

CVE-2018-1000553

Trovebox version = 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed...

CVE-2018-1000553: Server-Side Request Forgery (SSRF)

Trovebox version = 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. This attack appear to be exploitable via HTTP request. This vulnerability appears to have been fixed in after commit 742b8ed...

Red Hat Mobile Application Platform Cross-Site Request Forgery Security Bypass Vulnerability

App Studiomillicore is an app development tool. externalrequest ap is one of the interfaces for handling external requests. A security vulnerability exists in the externalrequest ap call in App Studiomillicore. An attacker can exploit this vulnerability to explore internal network resources and...

CVE-2017-18096

The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources via a Server Side Request Forgery SSRF by creating an OAut...

WireMock XML External Entity Injection Vulnerability

WireMock is an open source HTTP-based API simulator . An XML external entity vulnerability exists in WireMock versions prior to 2.16.0. A remote attacker could exploit this vulnerability to access local files and internal resources and potentially cause a denial of service...

Scilico I, Librarian server-side request forgery vulnerability (CNVD-2018-06447)

Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A security vulnerability exists in the 'url' parameter of getFromWeb in the functions.php file in Scilico I, Librarian 4.8 and earlier versions. An attacker can exploit this vulnerability to...

Server side request forgery (ssrf)

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...