CVE-2021-37940CWE-918

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server…

published December 7, 2021

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2021-12-07T18:59Z
EPSS history
Timeline
  • 07 DEC 18:59Z
    An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server…
    cvelistv5