Lucene search
Veracode Vulnerability DatabaseVERACODE:41062HistoryJun 28, 2023 - 11:02 a.m.
Server-side Request Forgery (SSRF)
2023-06-2811:02:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
ssrf
vulnerability
getwebfingerlinks
webfinger.go
http requests
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
50.0%
github.com/owncast/owncast is vulnerable to Server-side Request Forgery (SSRF). The vulnerability exists in the GetWebfingerLinks function at webfinger.go which allows a malicious attacker to send HTTP requests to arbitrary locations using the GET HTTP method leading to SSRF.
Related
cvelist
cvelist
CVE-2023-3188 Server-Side Request Forgery (SSRF) in owncast/owncast
2023-06-10 00:00:00
huntr
huntr
Unauthenticated Blind SSRF
2023-06-07 13:13:00
cve
cve
CVE-2023-3188
2023-06-10 02:15:09
osv
osv
CVE-2023-3188
2023-06-10 02:15:09
nvd
nvd
CVE-2023-3188
2023-06-10 02:15:09
prion
prion
Server side request forgery (ssrf)
2023-06-10 02:15:00
thn
thn
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
50.0%
Related for VERACODE:41062