CVE-2016-9752

In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status…

published December 1, 2016

CVSS
—
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.0th percentile
Published
2016-12-01T11:00Z
EPSS history
Timeline
  • 01 DEC 11:00Z
    In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status…
    cvelistv5