CVE-2018-16794

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

Stack overflow

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-16794

CVE-2018-16794 affects Microsoft ADFS 4.0 and earlier running on Windows Server 2016 and prior. The vulnerability is a server-side request forgery (SSRF) via the txtBoxEmail parameter in /adfs/ls, enabling an attacker to induce the ADFS server to make requests to an arbitrary URL. The linked conn...

PT-2018-13754

Name of the Vulnerable Software and Affected Versions Microsoft ADFS versions prior to 4.0 on Windows Server 2016 and previous Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It can be exploited via the txtBoxEmail parameter in the "/adfs/ls" API endpoint...

CVE-2018-16794: Server-Side Request Forgery (SSRF)

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...