CVE Feed

    Dashboard / CVE / CVE-2017-7553

    CVE-2017-7553

    The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

    Published:Sep 11, 2017
    Last Modified:Apr 20, 2025
    EPS:Sep 28, 2017
    EPSS Score:0.00181
    CVSS Score:6.3

    Affected Products

    Vendor
    Redhat
    Product
    Mobile Application Platform

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2023-6841 (CVSS 7.5) — A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limit…
    CVE-2020-1723 (CVSS 6.1) — A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in use…
    CVE-2018-3728 (CVSS 8.8) — hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MA…
    CVE-2017-7554 (CVSS 6.1) — It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker co…
    CVE-2017-7552 (CVSS 9.8) — A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, …
    CVE-2017-15010 (CVSS 7.5) — A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node…
    CVE-2017-1000117 (CVSS 8.8) — A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit …
    CVE-2016-8704 (CVSS 9.8) — An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processi…
    CVE-2016-8705 (CVSS 9.8) — Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing mu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High