Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/02/11 6:51 a.m.29 views

Open-Xchange: SSRF - Guard - Unchecked HKP servers

Description When encrypting an email, one of strategies to lookup recipient's encryption key is to contact a HKP keyserver specified in DNS records of recipient's domain. Specifically it is DNS SRV records for hkps.tcp. and hkp.tcp., which specify hostname and port of the keyserver. In source cod...

0.7AI score
SaveExploits0
Rows per page
Query Builder