Server-Side Request Forgery (SSRF)

2019-05-1601:42:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

42.6%

JSON

App Studio (millicore) is vulnerable to server-side request forgery (SSRF) attacks. An attacker could exploit a flaw in the external_request api call. This allows an attacker to probe the network internal resources, and access restricted endpoints which leads to a disclosure of information.

CPENameOperatorVersion
nagios-pluginseq2.0.1__1.2.el7
nagios-pluginseq1.4.16__12.el7rhgs
nagioseq4.0.8__4.el7map
nagioseq4.0.8__7.el7map
nagioseq3.5.1__6.el7
nagioseq3.5.1__9.el7
rediseq2.8.15__2.el7ost
rediseq2.8.21__1.el7ost
fh-system-dump-tooleq1.0.0__4.el7
supervisoreq3.0__2.el7cp

Name	Operator	Version
nagios-plugins	eq	2.0.1__1.2.el7
nagios-plugins	eq	1.4.16__12.el7rhgs
nagios	eq	4.0.8__4.el7map
nagios	eq	4.0.8__7.el7map
nagios	eq	3.5.1__6.el7
nagios	eq	3.5.1__9.el7
redis	eq	2.8.15__2.el7ost
redis	eq	2.8.21__1.el7ost
fh-system-dump-tool	eq	1.0.0__4.el7
supervisor	eq	3.0__2.el7cp