CVE-2017-7553

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Score

CVSS 3.0 6.3 Medium

Status

Modified - secalert@redhat.com

Published

2017-09-29

Last modified

2024-08-05

Weaknesses

CWE-918

Affected products

• Mobile Application Platform (Redhat)

References

• https://access.redhat.com/errata/RHSA-2017:2674
• https://access.redhat.com/errata/RHSA-2017:2675
• https://bugzilla.redhat.com/show_bug.cgi?id=1478792