CVE-2020-23776

{"id": "CVE-2020-23776", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-01-26T22:15:11.950", "references": [{"url": "https://github.com/zhonghaozhao/winmail/issues/3", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/zhonghaozhao/winmail/issues/3", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de tipo SSRF en Winmail versi\u00f3n 6.5, en el archivo app.php en el par\u00e1metro key cuando HTTPS est\u00e1 activado. Un atacante puede usar esta vulnerabilidad para causar que el servidor env\u00ede una petici\u00f3n hacia una URL espec\u00edfica. Un atacante puede modificar el valor \"HOST\" del encabezado de la petici\u00f3n para causar que el servidor env\u00ede la petici\u00f3n"}], "lastModified": "2024-11-21T05:14:04.800", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:winmail_project:winmail:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAEB4B7E-9C6C-4319-9A6D-A6E60594E96A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}