CVE-2021-44139

CVE-2021-44139 affects Alibaba Sentinel 1.8.2 with a pre-auth SSRF vulnerability. The Nuclei template confirms exploitation via the /registry/machine endpoint using the ip parameter, allowing remote unauthenticated attackers to trigger SSRF. Impact described includes potential access to internal ...

CVE-2019-19879

HashiCorp Sentinel up to 0.10.1 contains a flaw where negation in certain policy expressions is parsed incorrectly. The issue has been fixed in version 0.10.2. Affected component: Sentinel policy evaluation/parsing; root cause: incorrect handling of negation in expressions. Impact details are lim...