Vendor
Latchset
5 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.6
Python-kdcproxy: unauthenticated ssrf via realm‑controlled dns srv
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, si…