NetSight
high7.5

CVE-2020-9298

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spi…

Impact

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

Affected products

VendorProductAffected versions
SpinnakerOrca
before 8.7.0

Weakness classification

References