medium6.3
CVE-2017-7553
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF).
Impact
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Mobile Application Platform | through 4.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2017:2674
- https://access.redhat.com/errata/RHSA-2017:2675
- https://bugzilla.redhat.com/show_bug.cgi?id=1478792
- https://access.redhat.com/errata/RHSA-2017:2674
- https://access.redhat.com/errata/RHSA-2017:2675
- https://bugzilla.redhat.com/show_bug.cgi?id=1478792