GHSA-9g2j-5685-h44hMedium

Apache Ambari SSRF Vulnerability

Published
May 17, 2022
Last Modified
August 13, 2023

🔗 CVE IDs covered (1)

CVE-2015-1775 →

📋 Description

Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.

🎯 Affected products1

  • maven/org.apache.ambari:ambari:>= 1.5.0, < 2.1.0

🔗 References (4)