Beveiligingsadvies

CVE-2022-23071

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-19 10:15:14
Laatst bijgewerkt 2024-09-17 02:16:41
Toegewezen door Mend
CVSS-score geen score
Status PUBLISHED

Beschrijving

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information.