aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbitrary system command or disrupt service.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
aenrich a\\+hrd 6.8 |
||
aenrich a\\+hrd 7.0 |
Vulmon