CVE-2017-6201
PoC —CVSS 3.0
8.1 high
EPSS
2%p78
Published
()
Modified
Description
A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.
- Vendors
- sandstorm
- Products
- sandstorm
- Weakness
- CWE-918
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.