Unscored CVE-2018-16794 EUVD-2018-8594GHSA-59vp-r459-3wcr

Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail pa…

Published Sep 18, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.

References

105378 vdb-entry
20180914 Disclose SSRF Vulnerability mailing-list
http://packetstormsecurity.com/files/149376/Microsoft-ADFS-4.0-Windows-Server-2016-Server-Side-Request-Forgery.html
20180912 Disclose SSRF Vulnerability mailing-list