Lucene search
+L

4 matches found

OSV
OSV
added 2026/01/05 10:55 p.m.8 views

GHSA-VRJC-Q2FH-6X9H Spinnaker vulnerable to SSRF due to improper restrictions on http from user input

Impact The primary impact is allowing users to fetch data from a remote URL. This data can be then injected into Spinnaker pipelines via helm or other methods to extract things LIKE idmsv1 authentication data. This ALSO includes calling INTERNAL Spinnaker API's via a get and similar endpoints...

7.9CVSS6.8AI score0.00246EPSS
SaveExploits0References3
Rows per page
Query Builder