Lucene search
HistoryJul 21, 2023 - 8:15 p.m.
CVE-2021-35391
deskpro support desk
server side request forgery
vulnerability
arbitrary code
crafted url
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
26.8%
Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL.
Affected configurations
Node
deskprodeskproMatch2021.21.6
Related
cve
cve
CVE-2021-35391
2023-07-21 20:15:11
prion
prion
Server side request forgery (ssrf)
2023-07-21 20:15:00
cvelist
cvelist
CVE-2021-35391
2023-07-21 00:00:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
26.8%
Related for NVD:CVE-2021-35391