Vendor
OpenSupports
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.9
OpenSupports 4.11.0 — SSRF via test imap and smtp endpoints
Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission => 'any', enabling unauthenticated SSRF for internal network scanning and service in…