2 matches found
Glances has SSRF in IP Plugin via public_api leading to credential leakage
Summary A Server-Side Request Forgery SSRF vulnerability exists in the Glances IP plugin due to improper validation of the publicapi configuration parameter. The value of publicapi is used directly in outbound HTTP requests without any scheme restriction or hostname/IP validation. An attacker who...
8.8CVSS5.9AI score0.00396EPSS
SaveExploits1References5Affected Software1
20