CVE-2019-20055

Name of the Vulnerable Software and Affected Versions LiquiFire OS version 4.8.0

Description The issue allows for Server-Side Request Forgery (SSRF) via the call%3Durl substring followed by a URL in square brackets. This can potentially be exploited by manipulating the URL to access internal resources or services.

Recommendations For LiquiFire OS version 4.8.0, as a temporary workaround, consider restricting access to the call%3Durl substring to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.