Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38895
HistoryJan 18, 2023 - 12:25 a.m.

Server-Side Request Forgery (SSRF)

2023-01-1800:25:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
ssrf
vulnerable
remote attacker
exploit
server functionality
access
modify
url.

0.002 Low

EPSS

Percentile

53.5%

arc/web is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker is able exploit the SSRF vulnerability to abuse server functionality and access or modify resources via the __construct function of src/url/Url.php.

CPENameOperatorVersion
arc/weble2.1
arc/weble2.1

0.002 Low

EPSS

Percentile

53.5%