Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35246
HistoryApr 26, 2022 - 3:35 a.m.

Server-Side Request Forgery (SSRF)

2022-04-2603:35:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
ssrf
gibbon
software
validation
api-key
crafted url
information spoofing

EPSS

0.002

Percentile

59.3%

gibbon is vulnerable to server-side request forgery attacks. The vulnerability exists due to the lack of validation in api-key format which allows an attacker to send a crafted url and information spoofing.

EPSS

0.002

Percentile

59.3%