CVE-2018-1099

PoC —

CVSS 3.0

5.5 medium

EPSS

<1%p41

Published

Apr 3, 2018 (Apr 3, 2018)

Modified

Jun 17, 2026

Description

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

Vendors: redhat fedoraproject
Products: etcd, fedora
Weakness: CWE-20
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.