Lucene search
Veracode Vulnerability DatabaseVERACODE:45606HistoryFeb 22, 2024 - 12:28 p.m.
Server Side Request Forgery (SSRF)
2024-02-2212:28:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
ssrf
vulnerability
validation
user input
local network
grafana-csv-datasource
software
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
AI Score
6.9
Confidence
High
EPSS
0
Percentile
9.0%
github.com/grafana/grafana-csv-datasource is vulnerable to Server Side Request Forgery (SSRF). The vulnerability is due to improper validation of user input, allowing attackers to craft requests to endpoints within the local network.
Related
prion
prion
Design/Logic Flaw
2024-02-14 15:15:00
nvd
nvd
CVE-2023-5122
2024-02-14 15:15:08
cvelist
cvelist
CVE-2023-5122 SSRF in CSV Datasource Plugin
2024-02-14 15:06:12
vulnrichment
vulnrichment
CVE-2023-5122 SSRF in CSV Datasource Plugin
2024-02-14 15:06:12
cve
cve
CVE-2023-5122
2024-02-14 15:15:08
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
AI Score
6.9
Confidence
High
EPSS
0
Percentile
9.0%
Related for VERACODE:45606