Beveiligingsadvies

CVE-2026-100391

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-25 20:13:12

Laatst bijgewerkt 2026-10-05 14:55:05

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter. Remote attackers can supply arbitrary internal URLs including loopback and cloud metadata endpoints to read full responses from the proxy server.

← Alle CVE's bekijken Bekijk op cve.org ↗