CVE-2019-14255 - A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints

Back Back to CVE browser

CRITICAL

A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints

Published Aug 8, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.16%

Description

A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5495
Advisory
https://github.com/cactus/go-camo/security/advisories/GHSA-xrmp-4542-q746
x_refsource_CONFIRMExploitMitigationThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5495		Advisory
https://github.com/cactus/go-camo/security/advisories/GHSA-xrmp-4542-q746		x_refsource_CONFIRMExploitMitigationThird Party Advisory