Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:30325
HistoryMay 03, 2021 - 4:18 a.m.

Insecure Proxy

2021-05-0304:18:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
insecure proxy
hystrix-dashboard
software vulnerability
attacker access

EPSS

0.061

Percentile

93.7%

JSON

spring-cloud-netflix-hystrix-dashboard uses an insecure proxy. The proxy.stream endpoint allows an attacker to make requests to any server reachable by the server hosting the dashboard.

Related

nuclei 1
nvd 1
cve 1
osv 2
prion 1
cvelist 1
github 1
ibm 1
nuclei
nuclei
Spring Cloud Netflix - Server-Side Request Forgery
2020-09-01 13:24:39
nvd
nvd
CVE-2020-5412
2020-08-07 21:15:10
cve
cve
CVE-2020-5412
2020-08-07 21:15:10
osv
osv
Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix
2021-04-30 17:29:42
CVE-2020-5412
2020-08-07 21:15:10
prion
prion
Design/Logic Flaw
2020-08-07 21:15:00
cvelist
cvelist
CVE-2020-5412 Hystrix Dashboard Proxy In spring-cloud-netflix-hystrix-dashboard
2020-08-07 20:45:13
github
github
Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix
2021-04-30 17:29:42
ibm
ibm
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-02-02 05:06:51

EPSS

0.061

Percentile

93.7%

JSON
Related for VERACODE:30325
nuclei1nvd1cve1osv2prion1cvelist1github1ibm1