Lucene search
PRIOn knowledge basePRION:CVE-2022-43776HistoryOct 26, 2022 - 6:15 p.m.
Server side request forgery (ssrf)
2022-10-2618:15:00
PRIOn knowledge base
www.prio-n.com
7
server side request forgery
api endpoint
metabase vulnerability
301 redirects
302 redirects
The url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks. Previously implemented blacklists could be circumvented by leveraging 301 and 302 redirects.
Related
cve
cve
CVE-2022-43776
2022-10-26 18:15:11
cvelist
cvelist
CVE-2022-43776
2022-10-26 00:00:00
nvd
nvd
CVE-2022-43776
2022-10-26 18:15:11
osv
osv
CVE-2022-43776
2022-10-26 18:15:11
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55