CVE-2024-45843
Weak SSRF Filtering
概要
Weak SSRF Filtering
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deployed in Oracle Cloud or Alibaba.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com