Non évaluée
Recipes - SSRF on Import
CVE-2022-23071
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web mend.io