Beveiligingsadvies

CVE-2024-50811

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-08 00:00:00
Laatst bijgewerkt 2024-11-21 16:34:37
Toegewezen door mitre
CVSS-score 9.1
Status PUBLISHED

Beschrijving

hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls().