WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1550366 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-05-17T18:47:33
Updated: 2024-08-04T23:10:30.922Z
Reserved: 2019-05-17T00:00:00
Link: CVE-2019-12161
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-05-17T19:29:00.790
Modified: 2024-11-21T04:22:20.410
Link: CVE-2019-12161
Redhat
No data.