UBUNTU-CVE-2019-9187
Dashboard / Vulnerabilities / UBUNTU-CVE-2019-9187
Summary:
Details: ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs.
References: https://ubuntu.com/security/CVE-2019-9187, https://ikiwiki.info/security/#cve-2019-9187, https://www.openwall.com/lists/oss-security/2019/02/28/1, http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=e7b0d4a, http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=67543ce, http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=d283e4c, http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=9a275b2, https://www.cve.org/CVERecord?id=CVE-2019-9187
Affected packages
Package
Name: ikiwiki
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
