Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2020-11988

Apache XmlGraphics Commons 2.4 is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Source

Description

The MITRE CVE dictionary describes this issue as:

Apache XmlGraphics Commons 2.4 is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Additional Information

Bugzilla 1933816: CVE-2020-11988 xmlgraphics-commons: SSRF due to improper input validation by the XMPParser
CWE-20->CWE-918: Improper Input Validation leads to Server-Side Request Forgery (SSRF)
FAQ: Frequently asked questions about CVE-2020-11988

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-11988

Description

Additional Information

Vulmon Search

About

Products

Connect