9565 matches found
GHSA-W35P-WXWJ-RCM9 Server-Side Request Forgery (SSRF) in vriteio/vrite
Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...
CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite
Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...
CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite
Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...
CVE-2023-5572
CVE-2023-5572 describes a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository vriteio/vrite, affecting versions prior to 0.3.0. The issue arises in the vrite project and is tracked across multiple feeds (NVD, CVE lists, GHSA, osv, etc.). The standard references indicate the ...
GHSA-8JXC-5F94-22VH Magento Open Source allows Server-Side Request Forgery (SSRF)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
Magento Open Source allows Server-Side Request Forgery (SSRF)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
Server side request forgery (ssrf)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
CVE-2023-26366 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application t...
Adobe Commerce Code Issues Vulnerabilities
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A code issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stems from being affected by a server-side request forgery SSRF vulnerability that could lead to arbitrary file...
PT-2023-32185 · Vriteio · Vrite
Name of the Vulnerable Software and Affected Versions: vriteio/vrite versions prior to 0.3.0 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository vriteio/vrite. SSRF is a type of attack where an attacker can trick a server into making requests to internal...
PT-2023-6409 · Fortinet · Fortimanager +1
Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.2.0 through 7.2.3 and before 7.0.8 FortiAnalyzer version 7.4.0 FortiManager versions 7.2.0 through 7.2.3 and before 7.0.8 FortiManager version 7.4.0 Description: A server-side request forgery issue allows a remote...
Webedition CMS 2.9.8.8 Server-Side Request Forgery
Exploit Title: Webedition CMS v2.9.8.8 - Blind SSRF Application: Webedition CMS Version: v2.9.8.8 Bugs: Blind SSRF Technology: PHP Vendor URL: https://www.webedition.org/ Software Link: https://download.webedition.org/releases/OnlineInstaller.tgz?p=1 Date of found: 07.09.2023 Author: Mirabbas...
The vulnerability of the allowed_urls configuration in the PyTorch TorchServe training and scaling tool allows a attacker to perform an SSRF attack.
The vulnerability of the allowedurls configuration in PyTorch TorchServe’s model servicing and scaling tools is related to insufficient validation of incoming requests during URL verification. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...
ATX Ucrypt Code Issue Vulnerability
ATX Ucrypt is a series of media distribution gateways over IP Q2IP from ATX America, Inc. It is designed to provide reliable and secure HD or SD programming to hotels or other commercial venues. A security vulnerability exists in ATX Ucrypt 3.5 and prior versions, which stems from the presence of...
PT-2023-27137 · Unknown · Atx Ucrypt
Name of the Vulnerable Software and Affected Versions: ATX Ucrypt versions 3.5 and earlier Description: The web interface of ATX Ucrypt allows authenticated users, or attackers using default credentials for the admin, master, or user account, to include files via a URL in the "/hydra/view/get cc...
Server-Side Request Forgery (SSRF)
lemonldap-ng is vulnerable to Server-Side Request Forgery SSRF. The vulnerability allows an authenticated attacker to send GET requests to arbitrary URLs through the requesturi authorization parameter...
[SECURITY] [DLA 3612-1] lemonldap-ng security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3612-1 [email protected] https://www.debian.org/lts/security/ Yadd October 08, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
Debian dla-3612 : lemonldap-ng - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3612 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3612-1 [email protected] https://www.debian.org/lts/security/...