CVE-2018-16794

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

Stack overflow

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...

CVE-2018-16794

CVE-2018-16794 affects Microsoft ADFS 4.0 and earlier running on Windows Server 2016 and prior. The vulnerability is a server-side request forgery (SSRF) via the txtBoxEmail parameter in /adfs/ls, enabling an attacker to induce the ADFS server to make requests to an arbitrary URL. The linked conn...