Vendor
rustrak
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.5
Rustrak before 0.26.0 SSRF via Alert Integration Test routing_override.url
Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update permission to send requests to arbitrary destinations by supplying routing_override.url to POST /api/integrations/{id}/test. Attackers can ta…