Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TheHive Project UnshortenLink analyzer before 1.1, included in Cortex-Analyzers before 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create a new analysis, select URL for Data Type, and provide an SSRF payload like "http://127.0.0.1:22" in the Data parameter. The result can be seen in the main dashboard. Thus, it is possible to do port scans on localhost and intranet hosts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cortex-Analyzers UnshortenLink analyzer 代码问题漏洞
Vulnerability Description
Cortex-Analyzers是TheHive项目的一款安全事件分析和主动响应引擎。UnshortenLink analyzer是其中的一个链接分析器。 Cortex-Analyzers 1.15.2之前版本中的UnshortenLink analyzer 1.1之前版本存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
CVSS Information
N/A
Vulnerability Type
N/A