1 matches found
Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
When dashboard authentication is disabled, Bifrost accepts an enabled custom plugin with an HTTP URL as its path. The gateway fetches the URL before attempting to load it. This template confirms the unauthenticated server-side request with an out-of-band callback; it does not assert code executio...
8.1CVSS6.2AI score0.03575EPSS
SaveExploits0References2
20