Server-Side Request Forgery (SSRF)

2017-11-1408:45:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.9%

JSON

recurly is vulnerable to server-side request forgery (SSRF) attacks A malicious user can pass a URI from a different domain to gain access to API keys or other sensitive information.

CPENameOperatorVersion
recurlyeq2.9.0
recurlyeq2.8.0
recurlyle2.6.1
recurlyle2.1.9
recurlyle2.2.3
recurlyle2.4.9
recurlyle2.0.11
recurlyle2.3.8
recurlyle2.5.2
recurlyle2.7.6