Security Advisory

CVE-2016-9752

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-12-01 11:00:00
Last updated 2024-08-06 02:59:03
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code.