Skip to content
OpenAdvisories

Vendor

opengoofy

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    Hippo4j through 1.5.0 SSRF via clientAddress Parameter

    Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET reque…