CVE-2017-7553 The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoi...
MediumCVSS 6.3
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat mobile application platform | <= 4.4.3 | No fix listed |
References
- RHSA-2017:2674 vendor-advisory
- RHSA-2017:2675 vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory