WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1550366 | Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-05-17T18:47:33
Updated: 2019-05-17T18:47:33
Reserved: 2019-05-17T00:00:00
Link: CVE-2019-12161
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-05-17T19:29:00.790
Modified: 2019-05-21T18:03:57.003
Link: CVE-2019-12161
JSON object: View
Redhat Information
No data.
CWE