CVE-2021-36761

Name of the Vulnerable Software and Affected Versions Qlik Sense April 2020 patch 4

Description The GeoAnalytics feature in Qlik Sense allows Server-Side Request Forgery (SSRF). This issue enables an attacker to forge requests from the server, potentially leading to unauthorized access to internal systems or data.

Recommendations For Qlik Sense April 2020 patch 4, consider disabling the GeoAnalytics feature as a temporary workaround until a patch is available. Restrict access to the GeoAnalytics module to minimize the risk of exploitation.