CVE-2018-1099CWE-20

DNS rebinding vulnerability found in etcd 3.3.1 and earlier

published April 3, 2018

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-04-03T16:00Z
EPSS history
Timeline
  • 03 APR 16:00Z
    DNS rebinding vulnerability found in etcd 3.3.1 and earlier
    cvelistv5