Vendor
opengoofy
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
Hippo4j through 1.5.0 SSRF via clientAddress Parameter
Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET reque…