Lucene search
K

6 matches found

OSV
OSV
added 2024/01/30 8:57 p.m.14 views

GHSA-67M4-QXP3-J6HH TrueLayer.Client SSRF when fetching payment or payment provider

Impact The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to informatio...

8.6CVSS7.6AI score0.0013EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/01/30 8:57 p.m.33 views

TrueLayer.Client SSRF when fetching payment or payment provider

Impact The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to informatio...

8.6CVSS6.7AI score0.0013EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/01/30 5:15 p.m.10 views

CVE-2024-23838

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

8.6CVSS7.6AI score0.0013EPSS
Exploits0References2
Prion
Prion
added 2024/01/30 5:15 p.m.10 views

Information disclosure

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

5CVSS6.8AI score0.0013EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/30 4:26 p.m.16 views

CVE-2024-23838 TrueLayer.Client SSRF when fetching payment or payment provider

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

8.6CVSS7.6AI score0.0013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/30 4:26 p.m.11 views

CVE-2024-23838 TrueLayer.Client SSRF when fetching payment or payment provider

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

8.6CVSS6.5AI score0.0013EPSS
Exploits0References2
Rows per page
Query Builder