opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

Infogram: Server Side Request Forgery on JSON Feed

Hi Team, I would like to report SSRF issue. PoC: 1. Navigate to https://infogram.com/app/user-project. 2. Click on edit logo fields and click on add JSON Data. 3. Enter urlopenport response is Download failed 4. Enter urlclosedport response is Invalid data source Fix: Don't give permission to por...