CVE-2021-33581

MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the…

published March 30, 2022

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01284 · 69.9th percentile
Published
2022-03-30T21:47Z
EPSS history
Timeline
  • 30 MAR 21:47Z
    MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the…
    cvelistv5