CVE-2021-31216

CVE-2021-31216

Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by default). An attacker with access to the Investigate installation can specify an arbitrary URL in the parameters of the image proxy route and fetch external URLs as the Investigate process on the host.

Source: CVE-2021-31216

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다