high8.6
CVE-2021-29357
The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF…
Impact
The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Outsystems | Lifetime Management Console | from 11 before 11.7.0 |
| Outsystems | Outsystems | from 10 before 10.0.1104.0 |
| Outsystems | Platform Server | from 11 before 11.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://labs.integrity.pt/advisories/cve-2021-29357/
- https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226
- https://labs.integrity.pt/advisories/cve-2021-29357/
- https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226