The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: netflix
Published: 2020-08-28T14:45:54
Updated: 2024-08-04T10:26:16.115Z
Reserved: 2020-02-19T00:00:00
Link: CVE-2020-9298
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-08-28T15:15:12.407
Modified: 2020-08-31T18:38:37.770
Link: CVE-2020-9298
Redhat
No data.