PT-2018-8319 · Sandstorm · Sandstorm

·

CVE-2017-6201

·

تاريخ النشر

2018-02-06

·

تاريخ التحديث

2018-03-13

CVSS v3.1

8.1

عالية

المتجهAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Sandstorm versions prior to build 0.203
Description A Server Side Request Forgery issue exists in the install app process. A remote attacker may exploit this by providing a URL, potentially bypassing access control such as firewalls that prevent direct access to the URLs.
Recommendations For versions prior to build 0.203, update to build 0.203 or later to resolve the issue. As a temporary workaround, consider restricting access to the install app process to minimize the risk of exploitation.

استغلال

إصلاح

SSRF

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2017-6201

المنتجات المتأثرة

Sandstorm