Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-E927ED1641E3A16F78C2AE69870D5C1F

HistoryOct 12, 2021 - 12:00 a.m.

Improper Input Validation

2021-10-1200:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

0.001 Low

EPSS

Percentile

40.4%

JSON

An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address.

CPENameOperatorVersion
go/github.com/apache/trafficcontrol/traffic_ops/traffic_ops_golang/logingev4.1.0
go/github.com/apache/trafficcontrol/traffic_ops/traffic_ops_golang/loginltv5.1.3

CPE	Name	Operator	Version
	go/github.com/apache/trafficcontrol/traffic_ops/traffic_ops_golang/login	ge	v4.1.0
	go/github.com/apache/trafficcontrol/traffic_ops/traffic_ops_golang/login	lt	v5.1.3

References

nvd.nist.gov/vuln/detail/CVE-2021-42009

0.001 Low

EPSS

Percentile

40.4%

JSON

Related for GITLAB-E927ED1641E3A16F78C2AE69870D5C1F