Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-10648 State: PUBLISHED Published: 2019-03-30T12:53:57 Last Updated: 2024-08-04T22:31:59.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/robo-code/robocode/commit/836c84635e982e74f2f2771b2c8640c3a34221bd#diff-0296a8f9d4a509789f4dc4f052d9c36f - https://sourceforge.net/p/robocode/bugs/406/
CVE ID: CVE-2019-10649 State: PUBLISHED Published: 2019-03-30T13:13:48 Last Updated: 2024-08-04T22:31:59.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1533 - http://www.securityfocus.com/bid/107645 - https://usn.ubuntu.com/4034-1/ - https://www.debian.org/security/2020/dsa-4712
CVE ID: CVE-2019-10650 State: PUBLISHED Published: 2019-03-30T13:14:06 Last Updated: 2024-08-04T22:31:59.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1532 - http://www.securityfocus.com/bid/107646 - https://www.debian.org/security/2019/dsa-4436 - https://seclists.org/bugtraq/2019/Apr/37 - http://lists.opensuse.org/opensuse-security-announce/
ecurity/2019/dsa-4436 - https://seclists.org/bugtraq/2019/Apr/37 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://usn.ubuntu.com/4034-1/
CVE ID: CVE-2019-10651 State: PUBLISHED Published: 2019-07-11T17:31:15 Last Updated: 2024-08-04T22:31:59.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019
CVE ID: CVE-2019-10652 State: PUBLISHED Published: 2019-03-30T13:48:44 Last Updated: 2024-08-04T22:32:00.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/38
CVE ID: CVE-2019-10653 State: PUBLISHED Published: 2019-07-10T13:59:19 Last Updated: 2024-08-04T22:32:01.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/*.html page. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnblogs.com/7bit/articles/10551499.html
CVE ID: CVE-2019-10654 State: PUBLISHED Published: 2019-03-30T14:36:55 Last Updated: 2024-08-04T22:32:00.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive, a different vulnerability than CVE-2017-8845. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/108
CVE ID: CVE-2019-10655 State: PUBLISHED Published: 2019-03-30T16:42:06 Last Updated: 2024-08-04T22:32:01.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.
ed remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits - http://packetstormsecurity.com/files/165643/Grandstream-GXV3175-Unauthenticated-Command-Execution.html - http://packetstormsecurity.com/files/165931/Grandstream-GXV31XX-settimezone-Unauthenticated-Command-Execution.html
CVE ID: CVE-2019-10656 State: PUBLISHED Published: 2019-03-30T16:42:23 Last Updated: 2024-08-04T22:32:00.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10657 State: PUBLISHED Published: 2019-03-30T16:42:42 Last Updated: 2024-08-04T22:32:00.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10658 State: PUBLISHED Published: 2019-03-30T16:42:54 Last Updated: 2024-08-04T22:32:00.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/controller.icc.update_nds_webroot_from_tmp update_nds_webroot_from_tmp API call. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10659 State: PUBLISHED Published: 2019-03-30T16:43:08 Last Updated: 2024-08-04T22:32:00.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /manager?action=getlogcat priority field. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10660 State: PUBLISHED Published: 2019-03-30T16:43:21 Last Updated: 2024-08-04T22:32:01.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10661 State: PUBLISHED Published: 2019-03-30T16:43:32 Last Updated: 2024-08-04T22:32:01.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10662 State: PUBLISHED Published: 2019-03-30T16:43:42 Last Updated: 2024-08-04T22:32:00.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1 - https://github.com/scarvell/grandstream_exploits
CVE ID: CVE-2019-10663 State: PUBLISHED Published: 2019-03-30T16:43:52 Last Updated: 2024-08-04T22:32:01.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1
CVE ID: CVE-2019-10664 State: PUBLISHED Published: 2019-03-31T13:14:17 Last Updated: 2024-08-04T22:32:01.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domoticz/domoticz/commit/ee70db46f81afa582c96b887b73bcd2a86feda00 - https://www.exploit-db.com/exploits/46773/ - http://packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2019-10665 State: PUBLISHED Published: 2019-09-09T12:56:43 Last Updated: 2024-08-04T22:32:01.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options (html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php) do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqli_real_escape_string, which is only useful for preventing SQL injection attacks; other parameters are unfiltered. This allows an attacker to inject RRDtool syntax with newline characters via the html/graph.php script. RRDtool syntax is quite
lows an attacker to inject RRDtool syntax with newline characters via the html/graph.php script. RRDtool syntax is quite versatile and an attacker could leverage this to perform a number of attacks, including disclosing directory structure and filenames, file content, denial of service, or writing arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-rrdtool-injection-vulnerability-xl-19-023/
CVE ID: CVE-2019-10666 State: PUBLISHED Published: 2019-09-09T12:58:13 Last Updated: 2024-08-04T22:32:01.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include() function on user supplied input without sanitizing the values by calling basename() or a similar function. An attacker can leverage this to execute PHP code from the included file. Exploitation of these scripts is made difficult by additional text being appended (typically .inc.php), which means an attacker would need to be able to control both a filename and its content on the server. However, exploitat
ich means an attacker would need to be able to control both a filename and its content on the server. However, exploitation can be achieved as demonstrated by the csv.php?report=../ substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-limited-local-file-inclusion-via-directory-traversal-vulnerability-xl-19-020/
CVE ID: CVE-2019-10667 State: PUBLISHED Published: 2019-09-09T12:59:17 Last Updated: 2024-08-04T22:32:01.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. Information disclosure can occur: an attacker can fingerprint the exact code version installed and disclose local file paths. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-information-disclosure-vulnerability-xl-19-018/
CVE ID: CVE-2019-10668 State: PUBLISHED Published: 2019-09-09T13:00:17 Last Updated: 2024-08-04T22:32:01.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly accessible. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-authentication-bypass-vulnerability-xl-19-016/
CVE ID: CVE-2019-10669 State: PUBLISHED Published: 2019-09-09T12:46:12 Last Updated: 2024-08-04T22:32:01.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This function is not the appropriate function to sanitize command arguments as it does not escape a number of command line syntax characters such as ` (backtick), allowing an attacker to inject commands into the variable $rrd_cmd, which gets executed via passthru(). Additional Analyst Notes: - CVE Pr
er to inject commands into the variable $rrd_cmd, which gets executed via passthru(). Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/154391/LibreNMS-Collectd-Command-Injection.html - https://www.darkmatter.ae/xen1thlabs/librenms-command-injection-vulnerability-xl-19-017/
CVE ID: CVE-2019-10670 State: PUBLISHED Published: 2019-09-09T13:07:26 Last Updated: 2024-08-04T22:32:00.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqli_escape_real_string for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data being injected into these contexts, leading to attacker controlled JavaScript executing in the browser. One example of this is the string parameter in html/pages/inventory.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://ww
g parameter in html/pages/inventory.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-multiple-reflected-cross-site-scripting-vulnerability-xl-19-021/
CVE ID: CVE-2019-10671 State: PUBLISHED Published: 2019-09-09T13:01:21 Last Updated: 2024-08-04T22:32:00.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LibreNMS through 1.47. It does not parameterize all user supplied input within database queries, resulting in SQL injection. An authenticated attacker can subvert these database queries to extract or manipulate data, as demonstrated by the graph.php sort parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/librenms-multiple-sql-injection-vulnerability-xl-19-025/
CVE ID: CVE-2019-10672 State: PUBLISHED Published: 2019-03-31T16:48:18 Last Updated: 2024-08-04T22:32:01.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hoene/libmysofa/compare/49aa1c7...2ed84bb - https://github.com/hoene/libmysofa/releases/tag/v0.7 - https://github.com/hoene/libmysofa/commit/d39a171e9c6a1c44dbdf43f9db6c3fbd887e38c1 - https://usn.ubuntu.com/4033-1/
CVE ID: CVE-2019-10673 State: PUBLISHED Published: 2019-04-03T04:12:07 Last Updated: 2024-08-04T22:32:01.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become admin and subsequently extract sensitive information and execute arbitrary code. This occurs because the attacker can change the e-mail address in the administrator profile, and then the attacker is able to reset the administrator password using the WordPress "password forget" form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files
word forget" form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152315/WordPress-Ultimate-Member-2.0.38-Cross-Site-Request-Forgery.html - https://wpvulndb.com/vulnerabilities/9250
CVE ID: CVE-2019-10675 State: REJECTED Published: 2019-03-31T18:06:09 Last Updated: 2019-04-01T12:53:53 Description: No description available.
CVE ID: CVE-2019-10676 State: PUBLISHED Published: 2019-04-08T16:32:16 Last Updated: 2024-08-04T22:32:01.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this product, a pop-up window will appear prompting the user if they want to save this new password. This pop-up window will persist on any page the user enters within the browser until a decision is made. The code of the pop-up window can be read by remote servers and contains the login credentials and URL in cleartext. A malicious server could easily grab this information from the pop-up. This is r
login credentials and URL in cleartext. A malicious server could easily grab this information from the pop-up. This is related to id="uniqkey-password-popup" and password-popup/popup.html. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2019/Apr/1 - https://packetstormsecurity.com/files/152410/Uniqkey-Password-Manager-1.14-Credential-Disclosure.html - https://cxsecurity.com/issue/WLB-2019040055 - https://vuldb.com/?id.132740
CVE ID: CVE-2019-10677 State: PUBLISHED Published: 2019-09-05T13:23:06 Last Updated: 2024-08-04T22:32:01.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdisplay.cmd (name), /wlsecrefresh.wl (wlWscCfgMethod, wl_wsc_reg). Additional Analyst Notes: - CVE Program Container: References: - https://adamziaja.com/poc/201903-xss-zhone.html - https://redteam.pl/poc/dasan-zhone-znid-gpon-2426a-eu.html - http://packetstormsecurity.com/files/154357/DASAN-Zh
html - https://redteam.pl/poc/dasan-zhone-znid-gpon-2426a-eu.html - http://packetstormsecurity.com/files/154357/DASAN-Zhone-ZNID-GPON-2426A-EU-Cross-Site-Scripting.html - https://blog.redteam.pl/2019/09/cve-2019-10677-dasan-zhone-znid.html
CVE ID: CVE-2019-10678 State: PUBLISHED Published: 2019-03-31T20:53:54 Last Updated: 2024-08-04T22:32:01.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domoticz/domoticz/commit/2119afbe74ee0c914c1d5c4c859c594c08b0ad42 - https://www.exploit-db.com/exploits/46773/ - http://packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2019-10679 State: PUBLISHED Published: 2020-09-03T14:40:25 Last Updated: 2024-08-04T22:32:00.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%\Thomson Reuters\Eikon permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.thomsonreuters.com/en/products-services.html - https://www.sec-consult.com/en/vulnerability-lab/advisories/index.html - http://seclists.org/fulldisclosure/2020/Aug/19 - http://packetstormsecurity.com/files/158989/Eikon-Thomson-Reuters-4.0.42144-File-Permissions.html - https://sec-consult.c
ttp://packetstormsecurity.com/files/158989/Eikon-Thomson-Reuters-4.0.42144-File-Permissions.html - https://sec-consult.com/en/blog/advisories/extensive-file-permissions-on-service-executable-in-eikon-thomson-reuters-cve-2019-10679/
CVE ID: CVE-2019-10682 State: PUBLISHED Published: 2020-03-18T15:01:13 Last Updated: 2024-08-04T22:32:01.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: django-nopassword before 5.0.0 stores cleartext secrets in the database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relekang/django-nopassword/blob/8e8cfc765ee00adfed120c2c79bf71ef856e9022/nopassword/models.py#L14 - https://github.com/relekang/django-nopassword/commit/d8b4615f5fbfe3997d96cf4cb3e342406396193c - https://github.com/relekang/django-nopassword/compare/v4.0.1...v5.0.0
CVE ID: CVE-2019-10684 State: PUBLISHED Published: 2019-04-01T15:37:21 Last Updated: 2024-08-04T22:32:01.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit site_domain parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kyrie403/Vuln/blob/master/74cms/74cms%20v5.0.1%20remote%20code%20execution.md
CVE ID: CVE-2019-10685 State: PUBLISHED Published: 2019-05-24T17:17:53 Last Updated: 2024-08-04T22:32:01.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Heidelberg Prinect Archiver v2013 release 1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alt3kx/CVE-2019-10685 - https://medium.com/%40alt3kx/a-reflected-xss-in-print-archive-system-v2015-release-2-6-cve-2019-10685-b60763b7768b
CVE ID: CVE-2019-10686 State: PUBLISHED Published: 2019-04-01T16:21:00 Last Updated: 2024-08-04T22:32:00.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ctripcorp/apollo/issues/2103