Skip to content
OpenAdvisories

Vendor

Albert-Weasker

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field

    NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, loc…