5 matches found
Server-Side Request Forgery (SSRF)
Label Studio is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to faulty SSRF validation which executes a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a...
5.3CVSS6.8AI score0.00737EPSS
SaveExploits1References4Affected Software1
CVE-2020-15043
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...
6.5CVSS0.00449EPSS
SaveExploits1References2
CVE-2020-15043
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses...
6.5CVSS6.5AI score0.00449EPSS
SaveExploits1References3
20