Beveiligingsadvies

CVE-2026-92569

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 14:40:48

Laatst bijgewerkt 2026-09-16 14:40:48

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET requests to internal networks and cloud metadata services.

← Alle CVE's bekijken Bekijk op cve.org ↗