Vendor
Google Cloud Platform
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.8
Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration
A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended secur…