Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5425
HistoryNov 14, 2017 - 7:35 a.m.

Server-Side Request Forgery (SSRF)

2017-11-1407:35:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.003 Low

EPSS

Percentile

70.4%

paperclip is vulnerable to server-side request forgery (SSRF) attacks. The application automatically loads URLs passed to the URI adapter, allowing a malicious user to pass malicious URLs to the application to gain access to sensitive information such as server configuration.

CPENameOperatorVersion
papercliple5.1.0

0.003 Low

EPSS

Percentile

70.4%