Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•29 views

pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

ImpactOGC API - Process execution requests can use the subscriber object to requests to internal HTTP services. PatchesThe issue has been patched in master branch and made available as part of the 0.23.3 release. The patch disables any HTTP requests made to internal resources by default unless...

8.6CVSS5.8AI score0.00556EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder