youseries/ureport · Security
Server-Side Request Forgery in UReport
- GHSA ID
- GHSA-6q3p-36f4-cwxv
- CVE ID
- CVE-2020-21122
- Severity
- high
- Published
- Updated
Description
UReport v2.2.9 contains a Server-Side Request Forgery (SSRF) in the designer page which allows attackers to detect intranet device ports.
CWEs
- CWE-918 · Server-Side Request Forgery (SSRF)