CVE-2023-42812
Galaxy vulnerable to Server Side Request Forgery during data imports
Résumé
Galaxy vulnerable to Server Side Request Forgery during data imports
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious to issue arbitrary HTTP/HTTPS requests from the application server to internal hosts and read their responses. Version 22.05 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com