Server-Side Request Forgery (SSRF)

2022-11-1705:55:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ssrf vulnerability

github.com/kubevela/kubevela

server-side request forgery

ssrf bypass

crafted url

EPSS

0.001

Percentile

27.0%

JSON

github.com/kubevela/kubevela is vulnerable to server-side request forgery. The vulnerability is due to common.go because the request address in the warehouse is not properly restricted which allows an attacker to cause a SSRF bypass via a crafted url.