CVE-2017-6201 A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access contr...
HighCVSS 8.1
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access control such as firewalls that prevent the attackers from accessing the URLs directly.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sandstorm | < 0.203 | 0.203 |
References
- devco.re exploit third-party-advisory
- github.com patch third-party-advisory
- sandstorm.io vendor-advisory