high8.8
CVE-2018-10220
Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter.
Impact
Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a web application honeypot, and modules/handlers/emulators/rfi.py supports Remote File Inclusion emulation
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mushmush | Glastopf | Version 3.1.3 |