Server-side Request Forgery (SSRF)

🗓️ 19 Feb 2021 01:44:18Reported by Veracode Vulnerability DatabaseType

ReportLab vulnerability to remote code execution via SSRF and prevention using trustedSchemes & trustedHost

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
AstraLinux	Astra Linux - уязвимость в python-reportlab	20 May 202605:53	–	astralinux
Circl	CVE-2020-28463	18 Feb 202118:50	–	circl
CNNVD	ReportLab 代码问题漏洞	18 Feb 202100:00	–	cnnvd
CNVD	Reportlab Server-Side Request Forgery Vulnerability	17 Mar 202100:00	–	cnvd
CVE	CVE-2020-28463	18 Feb 202116:00	–	cve
Cvelist	CVE-2020-28463 Server-side Request Forgery (SSRF)	18 Feb 202116:00	–	cvelist
Debian	[SECURITY] [DLA 3590-1] python-reportlab security update	29 Sep 202319:57	–	debian
Debian CVE	CVE-2020-28463	18 Feb 202116:00	–	debiancve
Tenable Nessus	Debian dla-3590 : python-renderpm - security update	30 Sep 202300:00	–	nessus

Vulners

Node

AND

reportlab reportlabRange2.3–3.5.54python

Source	Link
tenable	www.tenable.com/cve/CVE-2020-28463
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00037.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQSFCID67K6BTC655EQY6MNOF35QI44/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/YZQSFCID67K6BTC655EQY6MNOF35QI44/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HMUJA5GZTPQ5WRYUCCK2GEZM4W43N7HH/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HMUJA5GZTPQ5WRYUCCK2GEZM4W43N7HH/
reportlab	www.reportlab.com/docs/reportlab-userguide.pdf

07 Nov 2023 23:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

CVSS 24

EPSS0.0116