PT-2025-20095 · Unknown · Solace Extra

·

CVE-2025-47464

·

Publicado

2025-05-07

·

Atualizado

2025-05-07

CVSS v3.1

4.9

Média

VetorAV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Solace Extra versions 1.3.1 and earlier
Description The issue is related to a Server-Side Request Forgery (SSRF) vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making unauthorized requests.
Recommendations For versions 1.3.1 and earlier, update to a version that contains a fix for this issue, if available. As a temporary workaround, consider restricting access to sensitive areas of the server to minimize the risk of exploitation.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-47464

Produtos afetados

Solace Extra