CVE-2021-21993

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library

published September 23, 2021

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00938 · 60.5th percentile
Published
2021-09-23T11:37Z
EPSS history
Timeline
  • 23 SEP 11:37Z
    The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library
    cvelistv5