Skip to content
OpenAdvisories

Package · Maven

com.netflix.spinnaker.orca:orca-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-9298

    Server-Side Request Forgery in Spinnaker Orca

    The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure.

    com.netflix.spinnaker.orca:orca-core Maven