Lucene search
Veracode Vulnerability DatabaseVERACODE:29435HistoryFeb 19, 2021 - 1:44 a.m.
Server-side Request Forgery (SSRF)
2021-02-1901:44:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
52.6%
ReportLab is vulnerable to remote code execution. An attacker is able to send malicious requests on behalf of the application via the usage of img tags. The risk of vulnerability can be reduced if trustedSchemes & trustedHosts are applied.
Related
nessus
nessus
openSUSE 15 Security Update : python-reportlab (openSUSE-SU-2021:2641-1)
2021-08-10 00:00:00
openSUSE 15 Security Update : python-reportlab (openSUSE-SU-2021:1147-1)
2021-08-14 00:00:00
openvas
openvas
openSUSE: Security Advisory for python-reportlab (openSUSE-SU-2021:1147-1)
2021-08-13 00:00:00
Fedora: Security Advisory for python-reportlab (FEDORA-2021-04bfae8300)
2021-10-30 00:00:00
Mageia: Security Advisory (MGASA-2021-0521)
2022-01-28 00:00:00
suse
suse
Security update for python-reportlab (moderate)
2021-08-09 00:00:00
Security update for python-reportlab (moderate)
2021-08-13 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: python-reportlab-3.6.2-1.fc34
2021-10-24 23:03:48
[SECURITY] Fedora 35 Update: python-reportlab-3.6.2-1.fc35
2021-10-29 23:27:16
prion
prion
Server side request forgery (ssrf)
2021-02-18 16:15:00
redhatcve
redhatcve
CVE-2020-28463
2021-02-18 21:24:39
nvd
nvd
CVE-2020-28463
2021-02-18 16:15:12
debiancve
debiancve
CVE-2020-28463
2021-02-18 16:15:12
cve
cve
CVE-2020-28463
2021-02-18 16:15:12
cvelist
cvelist
CVE-2020-28463 Server-side Request Forgery (SSRF)
2021-02-18 00:00:00
osv
osv
Server-side Request Forgery (SSRF) via img tags in reportlab
2021-03-29 16:32:27
PYSEC-2021-146
2021-02-18 16:15:00
python-reportlab - security update
2023-09-29 00:00:00
ubuntucve
ubuntucve
CVE-2020-28463
2021-02-18 00:00:00
github
github
Server-side Request Forgery (SSRF) via img tags in reportlab
2021-03-29 16:32:27
mageia
mageia
Updated python-reportlab packages fix security vulnerability
2021-11-25 16:06:13
debian
debian
[SECURITY] [DLA 3590-1] python-reportlab security update
2023-09-29 19:57:32
ibm
ibm